A user study of the expandable grid applied to P3P privacy policy visualization

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2008, Pages 45-54

  Reeder, Robert W ^a   Kelley, Patrick Gage ^b   McDonald, Aleecia M ^b   Cranor, Lorrie Faith ^b  

^a MICROSOFT   (United States)

^b CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

Expandable grid; P3P; Policy; Privacy; Userinterface

Indexed keywords

AUTOMATED TOOLS; EXPANDABLE GRID; FILE PERMISSION; GRID INTERFACES; LABORATORY STUDIES; MATRIX; NATURAL LANGUAGE POLICY; NATURAL LANGUAGES; ONLINE PRIVACY; P3P; PLATFORM FOR PRIVACY PREFERENCES; POLICY; PRESENTATION TOOLS; PRIVACY; PRIVACY POLICIES; PRIVACY PROTECTION; USER STUDY; VISUALIZATION TECHNIQUE;

LINGUISTICS; VISUALIZATION; WORLD WIDE WEB;

COMPUTER PRIVACY;

EID: 69949145370     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1456403.1456413     Document Type: Conference Paper

References (16)

1. A. I. Anton, J. B. Earp, Q. He, W. Stufflebeam, D. Bolchini, and C. Jensen. Financial privacy policies and the need for standardization. IEEE Security and Privacy, 2(2):36-45, March/April 2004.
2. M. Brown and R. Muchira. Taxonomy of conflicts in network security policies. IEEE Communications, 5(1):62-70, March 2004.
3. Center for Information Policy Leadership. Ten steps to develop a multilayered privacy policy, 2007. Available at http://www.hunton.com/files/tbl- s47Details%5CFileUpload265%5C1405%5CTen-Steps-whitepaper.pdf. Accessed May 19, 2008.
4. L. Cranor, B. Dobbs, S. Egelman, G. Hogben, J. Humphrey, M. Schunter, D. A. Stampley, and R. Wenning. The Platform for Privacy Preferences 1.1 (P3P1.1) specification. W3C Recommendation, November 2006. Available at http://www.w3.org/TR/P3P11/. Accessed May 19, 2008.
5. L. Cranor, S. Egelman, S. Sheng, A. M. McDonald, and A. Chowdhury. P3P deployment on websites. Electronic Commerce Research and Applications, 50, 2008. To appear. Available at http: //lorrie.cranor.org/pubs/p3p-deployment. pdf. Accessed February 26, 2008.
6. L. Cranor, M. Langheinrich, M. Marchiori, M. Presler-Marshall, and J. Reagle. The Platform for Privacy Preferences 1.0 (P3P1.0) specification. W3C Recommendation, April 2002. Available at http://www.w3.org/TR/P3P/. Accessed May 19, 2008.
7. L. F. Cranor. Web Privacy with P3P. O'Reilly, Sebastopol, CA, 2002.
8. L. F. Cranor, P. Guduru, and M. Arjula. User interfaces for privacy agents. ACM Transactions on Computer-Human Interaction, 13(2):135-178, June 2006.
9. Federal Trade Commission. Privacy online: A report to congress, June 1998. Available at http://www.ftc.gov/reports/privacy3/priv-23a.pdf. Accessed February 26, 2008.
10. M. Hochhauser. Lost in the fine print: Readability offinancial privacy notices, July 2001. Available at http: //www.privacyrights.org/ar/GLB-Reading. htm. Accessed May 19, 2008.
11. C. Jensen and C. Potts. Privacy policies as decision-making tools: an evaluation of online privacy notices. In CHI '04: Proceedings of the SIGCHI conference on Human factors in computing systems, pages 471-478, New York, NY, USA, 2004. ACM.
12. R. Lemos. Msn sites get easy-to-read privacy label. CNET News.com, 2005. Available at http://news.com.com/2100-1038-3-5611894.html. Accessed on May 19, 2008.
13. I. Pollach. What's wrong with online privacy policies? Communications of the ACM, 50(9):103-108, September 2007.
14. R. W. Reeder, L. Bauer, L. F. Cranor, M. K. Reiter, K. Bacon, K. How, and H. Strong. Expandable grids for visualizing and authoring computer security policies. In Proceedings of the ACM SIGCHI Conference on Human Factors in Computing Systems(CHI 2008), New York, NY, 2008. ACM Press.
15. Report by Kleimann Communication Group for the FTC. Evolution of a prototype financial privacy notice, 2006. Available at http://www.ftc.gov/ privacy/privacyinitiatives/ftcfinalreport060228.pdf. Accessed May 19, 2008.
16. J. Tsai, S. Egelman, L. Cranor, and A. Acquisti. The effect of online privacy information on purchasing behavior: An experimental study. In The 6th Workshop on the Economics of Information Security (WEIS), 2008. Available at http://weis2007.econinfosec.org/papers/57.pdf. Accessed February 26, 2008.