A "nutrition label" for privacy

ABSTRACT

We used an iterative design process to develop a privacy label that presents to consumers the ways organizations collect, use, and share personal information. Many surveys have shown that consumers are concerned about online privacy, yet current mechanisms to present website privacy policies have not been successful. This research addresses the present gap in the communication and understanding of privacy policies, by creating an information design that improves the visual presentation and comprehensibility of privacy policies. Drawing from nutrition, warning, and energy labeling, as well as from the effort towards creating a standardized banking privacy notification, we present our process for constructing and refining a label tuned to privacy. This paper describes our design methodology; findings from two focus groups; and accuracy, timing, and likeability results from a laboratory study with 24 participants. Our study results demonstrate that compared to existing natural language privacy policies, the proposed privacy label allows participants to find information more quickly and accurately, and provides a more enjoyable information seeking experience.

REFERENCES

• 1: Balasubramanian, S. and Cole, C. "Consumers' Search and Use of Nutrition Information: The Challenge and Promise of the Nutrition Labeling and Education Act." Journal of Marketing. 2002. Vol. 66, 112--127.
• 2: Beard, T. C., Nowson, C. A., Riley, M. D. "Traffic-light food labels." Med J Aust. 2007;186:19.
• 3: Belser, B. Designing the Food Label: Nutrition Facts. AIGA Journal. 1994.
• 4: Buckley, P. and Shepherd, R. Ergonomic factors: The clarity of food labels. British Food Journal. 1993. 95
• 5: Byrd-Bredbenner, C., Alfieri, L., Wong, A., and Cottee, P. The Inherent Educatiional Qualities of Nutrition Labels. Family and Consumer Sciences Research Journal, Vol 29, No 3, March 2001 265--280.
• 6: Lorrie Faith Cranor , Serge Egelman , Steve Sheng , Aleecia M. McDonald , Abdur Chowdhury, P3P deployment on websites, Electronic Commerce Research and Applications, v.7 n.3, p.274-293, November, 2008 [doi>10.1016/j.elerap.2008.04.003]
• 7: Consumer Product Safety Commission. "Labeling Requirements for Toy and Game Advertisements." 2008. http://cpsc.gov/library/foia/foia08/brief/toygameads.pdf
• 8: DeJoy, D. M., Cameron, K. A., and Della, L. J. Post-exposure evaluation of warning effectiveness: A review of field studies and population-based research. The Handbook of Warnings. 2006. (35--48).
• 9: Downs J. S., Loewenstein G., and Wisdom J. Strategies for Promoting Healthier Food Choices. American Economic Review. 2009, vol. 99, issue 2, pages 159--64
• 10: Drichoutis AC, Lazaridis P, Nayga RM. 2006. Consumers' use of nutritional labels: a review of research studies and issues. Acad Marketing Sci Rev, no. 9.
• 11: The Energy Label. 2007. www.energyrating.gov.au
• 12: European Union Commission Directive 98/11/EC "Energy Labeling." 1998. http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:1998:071:0001:0008:EN:PDF
• 13: Food Standards Agency. "Signpost Labeling Research." 2005 http://www.food.gov.uk/foodlabelling/signposting/siognpostlabelresearch/
• 14: Carlos Jensen , Colin Potts, Privacy policies as decision-making tools: an evaluation of online privacy notices, Proceedings of the SIGCHI conference on Human factors in computing systems, p.471-478, April 24-29, 2004, Vienna, Austria [doi>10.1145/985692.985752]
• 15: Kelley, P., A. McDonald, R. Reeder, and L. Cranor. P3P Expandable Grids. Poster at Privacy MindSwap Carnegie Mellon University. 2007. http://cups.cs.cmu.edu/soups/2008/posters/kelley.pdf
• 16: Kleimann Communication Group, Inc. Evolution of a Prototype Financial Privacy Notice. February 2006. Available: http://www.ftc.gov/privacy/privacyinitiatives/ftcfinalreport060228.pdf
• 17: Levy, A. and Hastak, M. Consumer Comprehension of Financial Privacy Notices. December 2008. Available: http://www.ftc.gov/privacy/privacyinitiatives/Levy-Hastak-Report.pdf
• 18: Maubach, N., Hoek J. "The Effect of Alternative Nutrition Information Formats on Consumers' Evaluations of a Children's Breakfast Cereal" Proceedings of the EParternships, Proof and Practice -- International Nonprofit and Social Marketing Conference 2008.
• 19: Aleecia M. Mcdonald , Robert W. Reeder , Patrick Gage Kelley , Lorrie Faith Cranor, A Comparative Study of Online Privacy Policies and Formats, Proceedings of the 9th International Symposium on Privacy Enhancing Technologies, August 05-07, 2009, Seattle, WA [doi>10.1007/978-3-642-03168-7_3]
• 20: McDonald, A, and Cranor, L. The Cost of Reading Privacy Policies. Telecommunications Policy Research Conference, 2008.
• 21: Privacy Leadership Initiative. Privacy Notices Research Final Results, November 2001, Available at: http://www.understandingprivacy.org/content/library/datasum.pdf.
• 22: Robert W. Reeder , Lorrie Faith Cranor, Expandable grids: a user interface visualization technique and a policy semantics to support fast, accurate security and privacy policy authoring, Carnegie Mellon University, Pittsburgh, PA, 2008
• 23: Robert W. Reeder , Patrick Gage Kelley , Aleecia M. McDonald , Lorrie Faith Cranor, A user study of the expandable grid applied to P3P privacy policy visualization, Proceedings of the 7th ACM workshop on Privacy in the electronic society, October 27-27, 2008, Alexandria, Virginia, USA [doi>10.1145/1456403.1456413]
• 24: Seymore, J. D., Lazarus Yaroch, A., Serdula M., Blanck, H. M., and Khan, L. K. "Impact of nutrition environmental interventions on point-of-purchase behavior in adults a review." Preventative Medicine 2004. 29: S108--S136.
• 25: The Center for Information Policy Leadership, H. W. L. Multi-layered notices.
• 26: Turow, J. Feldman, L., and Meltzer, K. Open to Exploitation: American Shoppers Online and Offline. The Annenberg Public Policy Center. 2005. http://www.annenbergpublicpolicycenter.org/NewsDetails.aspx?myId=31
• 27: U.S. Food and Drug Administration. A Food Labeling Guide. Center for Food Safety&Applied Nutrition. 1999. http://vm.cfsan.fda.gov/%7Edms/flg-toc.html.
• 28: U.S. Food and Drug Administration. "Guide to Nutrition Labeling and Education Act Requirements" 1994. http://www.fda.gov/ora/inspect_ref/igs/nleatxt.html
• 29: U.S. Food and Drug Administration. "New OTC Drug Facts Label" FDA Consumer Magazine. 2002. http://www.fda.gov/FDAC/features/2002/402_otc.html
• 30: W3C. The Platform for Privacy Preferences 1.0 (P3P1.0) Specification. http://www.w3.org/TR/P3P/
• 31: W3C. The Platform for Privacy Preferences 1.1 (P3P1.1) Specification. http://www.w3.org/TR/P3P11/
• 32: WELS Regulator (Australian Government). "WELS and Watermark." 2005. http://www.waterrating.gov.au/compliance.html

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.5 INFORMATION INTERFACES AND PRESENTATION (I.7)
      H.5.2 User Interfaces (D.2.2, H.1.2, I.3.6)

Additional Classification:
  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.1 Public Policy Issues
          Subjects: Privacy

General Terms:
Design, Experimentation, Human Factors, Standardization

Keywords:
P3P, information design, labeling, nutrition label, policy, privacy, user interface