Evaluating interfaces for privacy policy rule authoring

Conference on Human Factors in Computing Systems - Proceedings

Volumn 1, Issue , 2006, Pages 83-92

  Karat, Clare Marie ^a   Karat, John ^a   Brodie, Carolyn ^a   Feng, Jinjuan ^b  

^a IBM T J WATSON RESEARCH CENTER   (United States)

^b TOWSON UNIVERSITY   (United States)

Author keywords

Design process; Natural language interfaces; Privacy; Privacy policies; Social and legal issues

Indexed keywords

DECISION THEORY; FORMAL LANGUAGES; INTERFACES (COMPUTER); SOCIETIES AND INSTITUTIONS; USER INTERFACES;

DESIGN PROCESS; NATURAL LANGUAGE INTERFACES; PRIVACY POLICIES; SOCIAL AND LEGAL ISSUES;

DATA PRIVACY;

EID: 33745812093     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1124772.1124787     Document Type: Conference Paper

References (31)

1. Ackerman, M., Darrell, T., and Weitzner, D. Privacy in context, Human Computer Interaction, 2001, 16, 2, 167-176.
2. Adams, A. and Sasse, A. Privacy in multimedia communications: Protecting users, not just data. In A. Blandford, J. Vanderdonkt & P. Gray [Eds.]: People and Computers XV - Interaction without frontiers. Joint Proceedings of HCI2001 and ICM2001, Springer, Lille, 2001, 49-64.
3. Altman, I. The Environment and Social Behavior, Privacy, Personal Space, Territory and Crowding. Brooks/Cole Pub. Co., Inc., Monterey, CA, 1975.
4. Anton, A., He, Q., and Baumer, D. Inside JetBlue's privacy policy violations, IEEE Security & Privacy, 2004, 2, 6, 12-18.
5. Ashley, P., Hada, S., Karjoth, G., Powers, C. and Schunter, M., Enterprise Privacy Architecture Language (EPAL 1.2). W3C Member Submission, 2003, http://www.w3.org/Submission/EPAL/
6. Ball, E. Patient privacy in electronic prescription transfer. IEEE Security and Privacy, 2003, 1, 2, 77-80.
7. Baumer, D., Earp, J.B. and Payton, F.C. Privacy in medical records: IT implications of HIPAA. Computers and Society, December, 2000, 40-47.
8. Breaux, T.D., and Anton, A.I. Analyzing Goal Semantics for Rights, Permissions, and Obligations. Technical Report #TR-2005-08, North Carolina State University, Department of Computer Science, February 15, 2005.
9. CRA Conference on Grand Research Challenges in Information Security and Assurance. http://www.cra.org/Activities/grand-challenges/security/ November 16-19, 2003.
10. Cranor, L. Web Privacy with P3P, Cambridge: O'Reilly, 2003.
11. Flesch, M. The Art of Readable Writing, MacMillan Publishing, 1949.
12. Hagen, P. Personalization versus privacy, The Forrester Report, Nov., 2000, 1-19.
13. Jensen, C. and Potts, C. Privacy polices as decision-making tools: An evaluation of online privacy notices, Human Factors in Computing Systems: CHI 2004 Conference Proceedings, ACM Press, 2004, 471-478.
14. Jupiter Research. Security and Privacy Data, Presentation to the Federal Trade Commission Consumer Information Security Workshop, 2002,Online: http://www.ftc.gov/bcp/workshops/security/0205201eathern.pdf
15. Karat, C., Blom, J., and Karat, J. (Eds.). Designing Personalized User Experiences in eCommerce, Kluwer Academic Publishers, Dordrecht, 2004.
16. Karat, C., Karat, J., and Brodie, C. Why HCI research in privacy and security is critical now, International Journal of Human Computer Interaction, 2005, 63, 1, 1-4.
17. Karat, J., Karat, C., Brodie, C., and Feng, J. Privacy in information technology: Designing to enable privacy policy management in organizations, International Journal of Human Computer Studies, 2005, 63, 1, 153-174.
18. Kobsa, A. Personalized hypermedia and international privacy, Communications of the ACM, 2002, 45, 5, 64-67.
19. Malin, B. and Sweeney, L. How (not) to protect genomic data privacy in a distributed network: Using trail re-identification to evaluate and design anonymity protection systems, Journal of Biomedical Informatics, 2004, 37, 3, 179-192.
20. Manny, C.H. European and American privacy: Commerce, rights, and justice. Computer Law and Security Report, 2003, 19, 1, 4-10.
21. Michael, J.B., Ong, V.L., and Rowe, N.C. Natural-language processing support for developing policy-governed software systems, 39th International Conference on Technology for Object-Oriented Languages and Systems, IEEE Computer Society Press, 2001, 263-274.
22. National Research Council, Who goes there? Authentication through the lens of privacy, National Academies Press, Washington, D.C, 2003.
23. Neff, M., Byrd, R., and Boguraev, B. The Talent system: Tex-Tract architecture and data model, In Proceedings of HLT-NAACL Workshop on Software Engineering and Architectures of Language Technology Systems, Edmonton, Alberta, Canada, 2003.
24. OASIS, Privacy Policy Profile of XACML draft 01, 2004. http://docs.oasis-open.org/xacml/ access_control-xacml-2_0-privacy_profile-spec-cd-01.pdf
25. OECD, OECD guidelines on the protection of privacy and transborder flows of personal data, 1980, http://www.oecd.org/home/
26. Office of the Federal Privacy Commissioner of Australia. Privacy and Business, 2000, http://www.privacy.gov.au
27. Palen, L. and Dourish, P. Unpacking 'privacy' for a networked world, Human Factors in Computing Systems: CHI 2002 Conference Proceedings, ACM Press, 2002, 129-136.
28. Ponemon Institute and IAPP, 2003 Benchmark Study of Corporate Privacy Practices, 2004.
29. Smith, J. Privacy policies and practices: Inside the organizational maze, Communications of the ACM, 1993, 36, 12, 105-122.
30. Warren, S.A. and Brandeis, L.D. The right to privacy, Harvard Business Review, 1890, Dec, 4, 195.
31. th Congress, July 24, 2003.