Privacy policies as decision-making tools: an evaluation of online privacy notices

By Carlos Jensen, Colin M. Potts. International Conference on Human Factors in Computing Systems, 2004

482 citations recorded by the source corpus.

Subfields: Electrical and Electronic Engineering, Sociology and Political Science, Human-Computer Interaction

View Paper: https://www.semanticscholar.org/paper/989347d793f2862249dd4c0506bc864deea7cc01

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Electrical and Electronic Engineering

In Sociology and Political Science

In Human-Computer Interaction

Citations in the corpus

User interfaces for privacy agents (2006, background): “Privacy policies on many popular websites are written at a college reading level or higher [Jensen and Potts 2004].”
How Short Is Too Short? Implications of Length and Framing on the Effectiveness of Privacy Notices (2016, methodology): “The bulleted icon format was used in the second and third study. modality of privacy notices [43].”
Standardizing privacy notices: an online study of the nutrition label approach (2010, background): “Most policies are written at a level that is suitable for consumers with a collegelevel education and use specific domain terminology that consumers are frequently unfamiliar with [4, 10].”
The Economics of Privacy (2016, background): “These include the failure of privacy policies to properly inform consumers about how their data will be used (Jensen and Potts, 2004); the large opportunity costs associated with frameworks that rely on consumers reading privacy policies (McDonald and Cranor, 2008); and how the same policy can be us”
The Creation and Analysis of a Website Privacy Policy Corpus (2016, background): “Prior attempts on analyzing privacy policies focused largely on manually assessing their usability (Jensen and Potts, 2004) or compliance with self-regulatory requirements (Hoke et al.”
A "nutrition label" for privacy (2009, background): “Online privacy policies are confusing due to the use of specific terms that many people do not understand, descriptions of activities that people have difficulty relating to their own use of websites, a readability level that is congruent with a college education, and a noncommittal attitude towards”
Online Behavioral Advertising: A Literature Review and Research Agenda (2017, unknown): “It would take a person approximately 201 hours per year to read all privacy statements for the websites he or she visits (McDonald and Cranor 2008); in addition, people are highly unlikely to understand the language of such statements (Jensen and Potts 2004; Milne, Culnan, and Greene 2006).”
A Design Space for Effective Privacy Notices (2015, background): “…developed design space can help designers, developers, and researchers identify notice and choice requirements and develop a comprehensive notice concept for their system that addresses the needs of different audiences and considers the system’s limitations and opportunities for providing notice.”
The Effect of Online Privacy Information on Purchasing Behavior: An Experimental Study (2011, background): “We discuss limitations and implications in Sections 6 and 7, respectively.”
Privacy and human behavior in the age of information (2015, background): “Research has highlighted not only that an overwhelming majority of Internet users do not read privacy policies (72), but also that few userswould benefit fromdoing so; nearly half of a sample of online privacy policies were found to be written in language beyond the grasp of most Internet users (73)”
Expectation and purpose: understanding users' mental models of mobile app privacy through crowdsourcing (2012, background): “Past work has shown that few people read E n User License Agreements (EULAs) [20] or web privacy policies [23], because (a) there is an overriding d esire to install the app or use the web site, (b) reading th ese policies is not part of the user’s main task (which is to use the app or web site), (c”
Privacy in the Digital Age: A Review of Information Privacy Research in Information Systems (2011, background): “Findings suggest companies still do not provide appropriate privacy protection for consumers because many do not have privacy policies, and when they do, they often do not comply with the FIP standards (Jensen and Potts 2004; Liu and Arnett”
The biggest lie on the Internet: ignoring the privacy policies and terms of service policies of social networking services (2018, background): “This di ﬀ ers from the process of placing a link at the margins of a user interface, such as at the bottom of a webpage (Jensen & Potts, 2004), requiring users to think about the link, ﬁ nd the link and click on the link, without being prompted.”
Disclosure: Psychology Changes Everything (2014, unknown): “It has been estimated that 54% of privacy policies are beyond the grasp of 57% of the Internet population (Jensen & Potts 2004) and, somewhat amusingly, that the aggregate dollar value of the time it would take for US consumers actually to read privacy policies would be $652 billion per year…”
Dark Patterns after the GDPR: Scraping Consent Pop-ups and Demonstrating their Influence (2020, background): “Privacy policy notices are notorious for taking a disproportionate amount of time to go through and require reading comprehension abilities at university level [32].”
Privacy, Trust, and Self-Disclosure Online (2010, background): “In part, this may be due to the lack of usability of the policies themselves, with the majority requiring greater than high school education to be comprehended (Jensen & Potts, 2004).”
Privacy practices of Internet users: Self-reports versus observed behavior (2005, background): “Informal analysis of log-file data, however, suggests that the true rates are much lower (Jensen and Potts, 2004).”
Your Location has been Shared 5,398 Times!: A Field Study on Mobile App Privacy Nudging (2015, background): “This phenomenon has been attributed to ineffective communication of privacy risks and protections to users in privacy policies and notices [20].”