Explore chapters and articles related to this topic
Privacy, Security, and Trust
Published in Julie A. Jacko, The Human–Computer Interaction Handbook, 2012
John Karat, Clare-Marie Karat, Carolyn Brodie
Cranor (2005) leads the W3C standardization work in the area of the Platform for Privacy Preferences (P3P) policies. P3P policies provide end-users information about the privacy policies of a site before they interact with it. Dr. Cranor and a team at AT&T Labs designed and developed the Privacy Bird, a browser help object that provides summary information about the agreement or lack thereof between the end-user’s privacy preferences and the privacy policy of the website with which the person is considering interacting. Research continues to improve the usability of the Privacy Bird in communicating to users about website privacy policies and in capturing user privacy preferences. At the current time, there is no verification possible that organizations are operating according to their stated P3P policies. An important area for future research is the challenge of linking the P3P policy to the internal operational privacy policies and their implementation in organizations, and then enabling compliance audits of policy execution.
Privacy Concerns and Methods for Safeguarding Privacy
Published in Krzysztof W. Kolodziej, Johan Hjelm, Local Positioning Systems, 2017
Krzysztof W. Kolodziej, Johan Hjelm
But as a developer, the first step in developing a method is to provide a mechanism. The Platform for Privacy Preferences (P3P) Project, developed by the World Wide Web Consortium, is emerging as an industry standard providing a simple, automated way for users to gain more control over the use of personal information on websites they visit. It was released as a W3C recommendation in 2002.
A quarter century of usable security and privacy research: transparency, tailorability, and the road ahead
Published in Behaviour & Information Technology, 2022
Christian Reuter, Luigi Lo Iacono, Alexander Benlian
A similar development path and timeline can be seen for the research area of usable privacy. Initial work focussing on the intersection of HCI and privacy research appeared around 1979 and focussed mainly on the employment context (Ganster et al. 1979). With the commercialisation of the World Wide Web and the subsequent development into Web 2.0, the focus shifted to the private and online privacy context as websites began to track and analyse their users' behaviour (Cranor and Garfinkel 2005). At that time, technical approaches such as the Platform for Privacy Preferences Project (P3P) (Hochheiser 2002) were proposed to increase user trust in the Web. P3P is a machine-readable language that can be used to manage data usage policies. When a user visits a website, P3P compares what personal information the user wants to share according to their policy and what information the website wants to receive according to its policy. If the two policies do not match, P3P informs the user and asks them if they are willing to visit the website and risk disclosing more personal information. P3P formed the basis for more than a decade of research to find out whether the standard could actually be used by consumers to express their privacy choices. Since the beginnings of usable privacy coincided with usable security, the workshops and conferences that emerged around 2005 also focussed on usable privacy. However, usable privacy-specific events have also emerged, most notably workshops at the annual Privacy Enhancing Technologies Symposium (PETS) since 2008.