Use of a P3P user agent by early adopters

ABSTRACT

The Platform for Privacy Preferences (P3P), developed by the World Wide Web Consortium (W3C), provides a standard computer-readable format for privacy policies and a protocol that enables web browsers to read and process privacy policies automatically. P3P enables machine-readable privacy policies that can be retrieved automatically by web browsers and other user agent tools that can display symbols, prompt users, or take other appropriate actions. We developed the AT&T Privacy Bird as a P3P user agent that can compare P3P policies against a user's privacy preferences. Since P3P was adopted as a W3C recommendation in April 2002, little work has been done to study how it is being used and, especially, its impact on users. Many questions have been raised about whether and how Internet users will make use of P3P, and how to build P3P user agents that will prove most useful to end users. In this paper we first provide a brief introduction to P3P and the AT&T Privacy Bird. Then we discuss a survey of AT&T Privacy Bird users that we conducted in August 2002. We found that a large proportion of AT&T Privacy Bird users began reading privacy policies more often and being more proactive about protecting their privacy as a result of using this software. Unfortunately, the usefulness of P3P user agents is severely limited by the number of web sites that have implemented P3P. Our survey results also suggest that if it becomes easier to compare privacy policy across e-commerce web sites, a significant group of consumers would likely use this information in their purchase decisions.

REFERENCES

• 1: Cranor, L. and Reagle, J. Designing a Social Protocol: Lessons Learned from the Platform for Privacy Preferences Project, in J.K. MacKie-Mason and D. Waterman (eds.) Telephony, the Internet, and the Media. Lawrence Erlbaum Associates, Mahwah, NJ, 1998. http://www.w3.org/People/Reagle/papers/tprc97/tprc-f2m3.html
• 2: Mark S. Ackerman , Lorrie Faith Cranor , Joseph Reagle, Privacy in e-commerce: examining user scenarios and privacy preferences, Proceedings of the 1st ACM conference on Electronic commerce, p.1-8, November 03-05, 1999, Denver, Colorado, United States [doi>10.1145/336992.336995]
• 3: Lorrie Faith Cranor , Lawrence Lessig, Web Privacy with P3p, O'Reilly & Associates, Inc., Sebastopol, CA, 2002
• 4: Cranor, L., Langheinrich, M., Marchiori, M., Presler-Marshall, M., and Reagle, J. The Platform for Privacy Preferences 1.0 (P3P1.0) Specification. World Wide Web Consortium Recommendation, April 2002. http://www.w3.org/TR/P3P/.
• 5: Cranor, L., Langheinrich, M., and Marchiori, M. A P3P Preference Exchange Language 1.0 (APPEL1.0). World Wide Web Consortium Working Draft, April 2002. http://www.w3.org/TR/WD-P3P-Preferences.
• 6: Ernst & Young. P3P Dashboard Report, August 2002. http://www.ey.com/global/download.nsf/US/P3P_Dashboard_-_August_2002/$file/P3PDashboardAugust2002.pdf
• 7: Esposito, D. Browser Helper Objects: The Browser the Way You Want It, MSDN Library, January 1999. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwebgen/html/bho.asp.
• 8: Goldfeder, A. and Leibfried, L. Privacy in Internet Explorer 6. MSDN Library, October 2001. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpriv/html/ie6privacyfeature.asp.
• 9: Harris, Louis and Associates and Westin, A.F. E-commerce & Privacy: What Net Users Want. Privacy & American Business, Hackensack NJ, 1998.
• 10: Princeton Survey Research Associates. A Matter of Trust: What Users Want from Web Sites. Consumer WebWatch, April 2002. http://www.consumerwebwatch.org/news/1_abstract.htm.
• 11: Privacy Leadership Initiative. Privacy Notices Research Final Results. Conducted by Harris Intereactive, December 2001. http://www.ftc.gov/bcp/workshops/glb/supporting/harris%20results.pdf.
• 12: Wall Street Journal. Exposure in Cyberspace. Conducted by Harris Interactive, 21 March 2001, p. B1.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.1 Public Policy Issues
          Subjects: Privacy

General Terms:
Design, Human Factors, Standardization

Keywords:
P3P, privacy, survey, user agent, user study