This paper addresses the question whether the recently proposed approach of concise privacy notices in apps and on websites is effective in raising user awareness. To assess the effectiveness in a realistic setting, we included concise notices in a fictitious but realistic fitness tracking app and asked participants recruited from an online panel to provide their feedback on the usability of the app as a cover story. Importantly, after giving feedback, users were also asked to recall the data practices described in the notices. The experimental setup included the variation of different levels of saliency and riskiness of the privacy notices. Based on a total sample of 2,274 participants, our findings indicate that concise privacy notices are indeed a promising approach to raise user awareness for privacy information when displayed in a salient way, especially in case the notices describe risky data practices. Our results may be helpful for regulators, user advocates and transparency-oriented companies in creating or enforcing better privacy transparency towards average users that do not read traditional privacy policies.
翻译:本文讨论了最近提出的在应用程序和网站上发布简明隐私通知的建议是否对提高用户认识有效的问题; 为了评估现实环境中的有效性,我们将简要通知列入虚构但现实的健身跟踪应用软件,并询问从在线小组征聘的与会者就应用程序的可用性提供反馈,作为封面故事; 重要的是,在提供反馈后,还请用户回顾通知中描述的数据做法; 试验性设置包括隐私通知不同程度的显著性和风险性的差异; 根据总共2 274名与会者的抽样,我们的调查结果表明,在以突出方式展示隐私信息时,简要隐私通知确实是一种很有希望的办法,提高用户对隐私信息的认识,特别是在通知描述危险数据做法的情况下; 我们的结果可能有助于监管者、用户倡导者和面向透明度的公司为不阅读传统隐私政策的一般用户创造或提高隐私透明度。