(Georgia Institute of Technology, 2005)
Jensen, Carlos; Tullio, Joseph; Potts, Colin; Mynatt, Elizabeth D.
Privacy is an important concern for users, and a difficult design challenge. Different user populations have different requirements and expectations when it comes to privacy; thus finding universally acceptable solutions is far from trivial. Design guidelines have been available for a number of years, but often fail to address the dynamic and impromptu nature of privacy management. These methods also fail to provide a robust and replicable procedure for identifying potential problems, leaving the design process more in the realm of art than science. We identify general requirements for privacy-aware design and review how existing methods and guidelines meet these requirements. We then introduce a light-weight method adapted from the requirements engineering literature for the structured analysis of privacy vulnerabilities in design and the iterative adaptation of preferences. We present a study of this method on a predictive group calendar system.
(Georgia Institute of Technology, 2003)
Jensen, Carlos; Potts, Colin
Posting privacy policies has become a popular practice with businesses as they seek to shield themselves from potential liability or regulation, as well as inform users about their privacy and rights. These policies are in many ways modeled after software license statements, and are often more legalistic than user friendly. This paper examines the current practice of privacy policies as fair warning hold up from a usability perspective, and what steps can be taken to ensure that the average user can protect their privacy online.