Making privacy visible,Lorrie Faith Cranor October 19, 2007,2,Privacy concerns seem inconsistent with behavior,People say they want privacy but they dont take steps to protect it Many hypotheses as to why that is They dont really care that much about privacy They prefer immediate gratification now to privacy protections that they wont benefit from until later They dont understand the privacy implications of their behavior The cost of privacy protection (including figuring out how to protect their privacy) is too high ,3,Making privacy visible,Communicate meaningfully about privacy risks Make it easy for people to understand and control privacy options,4,Requirements for meaningful control,Individuals must understand what options they have Individuals must understand implications of their options Individuals must have the means to exercise options Costs must be reasonable Money, time, convenience, benefits,5,Privacy policies,Inform consumers about privacy practices Consumers can decide whether practices are acceptable, when to opt-out Most policies require college-level skills to understand, long, change without notice Few people read privacy policies Existing privacy policies are not an effective way to inform consumers or give them privacy controls,6,Platform for Privacy Preferences Project (P3P),World Wide Web Consortium (W3C) recommendation Standard machine-readable (XML) format for privacy policies Enables browsers and other tools to Summarize privacy policies Compare policies with user preferences Alert and advise users P3P support built into IE6/7 and Netscape 7,7,Privacy Bird,Free download of beta from http:/privacybird.org/ “Browser helper object” for IE6 Reads P3P policies automatically Bird icon indicates whether site matches users privacy preferences Clicking on bird icon gives more information,Bird is privacy indicator,Red bird indicates mismatch,Privacy settings,11,Privacy Finder,Prototype developed at AT&T Labs, improved and deployed by CUPS Uses Google or Yahoo! search API Checks for P3P, evaluates against users preferences Composes search result page with privacy annotations and links to “Privacy Report” http:/privacyfinder.org/,Demo,14,Evaluating Privacy Finder,Have enough sites adopted P3P for Privacy Finder to be useful? S. Egelman, L. Cranor, and A. Chowdhury. An Analysis of P3P-Enabled Web Sites among Top-20 Search Results. Proceedings of the Eighth International Conference on Electronic Commerce August 14-16, 2006, Fredericton, New Brunswick, Canada. Will the prominent display of privacy information cause consumers to take privacy into account when making online purchasing decisions? J. Gideon, S. Egelman, L. Cranor, and A. Acquisti. Power Strips, Prophylactics, and Privacy, Oh My! In Proceedings of the 2006 Symposium On Usable Privacy and Security, 12-14 July 2006, Pittsburgh, PA. J. Tsai, S. Egelman, L. Cranor, and A. Acquisti. The Effect of Online Privacy Information on Purchasing Behavior: An Experimental Study. Workshop on the Economics of Information Security, June 7-8, 2007, Pittsburgh, PA.,15,Does Privacy Finder influence purchases?,Online shopping studies Pay participants to make online purchases with their own credit cards Some use Privacy Finder and some use generic search engine Lab studies Study of college students purchasing power strips and condoms, no price incentive (reimburse cost) Study of Pittsburgh residents purchasing batteries and sex toys, with price incentive (keep the change),16,Lab study design,16 participants in each condition Condition 1: No information Condition 2: Irrelevant information Condition 3: Privacy information Products Non-privacy Sensitive - batteries Privacy sensitive - sex toy Participants paid fixed amount and told to “keep the change”,17,Condition 1 No information,18,Condition 2 Irrelevant information,19,Condition 3 Privacy information,Privacy premium: $0.69 4.8%,20,Batteries,Sex Toy,Results,21,Conclusions,Accessible privacy information affects consumer behavior Consumers willing to pay for better privacy Privacy Finder helps users make privacy informed decisions,22,Ongoing and future work,Study on impact of privacy information timing Privacy Finder provides info in search results Privacy Bird provides info after users have arrived at web site Privacy Finder field study Interested in partnering with major search engine provider Design and testing of standardized privacy policy formats Policies are complex and nuanced Users dont know privacy jargon or understand risks Explore what people understand about privacy and ways to educate them about privacy risks Make informed consent meaningful Interfaces for visualizing and controlling other aspects of privacy,23,P3P Expandable Grid,Expandable Grids,Office,Students,Alice,Bob,Lab,Kitchen,Windows computer,Key,Not used,Heavily used,Visitors,Cindy,Dwayne,Edith,Students,Alice,Bob,Visitors,Students,Alice,Bob,Visitors,Students,Alice,Bob,Visitors,10/25/06 3:30PM,Thursday