Let users control their data – Privacy policy-based user interface design

Abstract

Not only are common privacy policies hard to read and understand, but users are usually not experiencing any noticeable reactions of the application to their personal choices, if any are given. The Layered Privacy Language (LPL) is used to present legal privacy policies to the user in a concise way allowing the user fine-grained personalization options. Our contribution consists of the definition and detailing of possible personalization interaction scenarii in the context of web-applications and their validation within our evaluation environment. To simulate a negotiation of a privacy policy, a scenario environment is proposed, simulating several personal privacy preferences and users. Users can hereby perform different privacy policy personalization actions.