11. privacy notice and choice - university of chicago
TRANSCRIPT
![Page 1: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/1.jpg)
1
11. Privacy Notice
and Choice
Blase Ur, May 1st (May Day), 2017
CMSC 23210 / 33210
![Page 2: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/2.jpg)
2
Today’s class
• Discuss projects
• Privacy notice and choice
![Page 3: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/3.jpg)
3
Project progress reports
• Written reports due May 8
– By email (no paper copy needed) to Blase and TA
– Research questions and hypotheses
– (Combined) related work
– (Combined) methodology
– Full draft of survey, interview questions, scripts, etc.
– Describe unresolved issues or challenges
• 7 min presentations (3 min questions) May 8 + 10
– Email PDF to [email protected] 5/8 @ noon
– Explain your study design
– Propose things for which you want feedback
![Page 4: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/4.jpg)
4
Typical paper structure
• Abstract
• Introduction
• Related work
• Methodology
• Results
• Discussion / limitations / conclusion
![Page 5: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/5.jpg)
5
Usable security paper structure
• Abstract
• Introduction
• Related work
• Methodology
• Pilot results
• Lessons learned (for moving forward)
• Discussion / limitations / conclusion
![Page 6: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/6.jpg)
6
Privacy notice & choice
![Page 7: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/7.jpg)
7
Fair Information Practice Principles
(US Federal Trade Commission)
1. Notice / awareness
2. Choice / consent
3. Access / participation
4. Integrity / security
5. Enforcement / redress
![Page 8: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/8.jpg)
8
![Page 9: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/9.jpg)
9
Notice fatigue and helplessness
• Information shown at
inopportune times
• Misconceptions
• Lack of understanding
• Lack of choices
• Habituation
![Page 10: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/10.jpg)
10
Time to read policies of
websites you visit:
244 hours/year
A. McDonald & L. Cranor, The Cost of Reading Privacy
Policies, I/S: A Journal of Law and Policy for the
Information Society, 2008.
![Page 11: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/11.jpg)
11
![Page 12: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/12.jpg)
12
Tools of FTC in US
• Unfair practices
– Injure consumer
– Violate established policy
– Unethical
• Deceptive practices
– Mislead consumer
– Differ from reasonable consumer expectations
![Page 13: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/13.jpg)
13
![Page 14: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/14.jpg)
14
![Page 15: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/15.jpg)
15
![Page 16: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/16.jpg)
16
It’s getting worse
![Page 17: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/17.jpg)
17
Simplified notice and choice
“the question is not whether consumers
should be given a say over unexpected uses
of their data; rather, the question is how to
provide simplified notice and choice.”
Edith Ramirez
Former FTC Chairwoman
January 2015
Speaking about IoT privacy
![Page 18: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/18.jpg)
18
EU General Data Protection
Regulation (effective 2018)
• “have transparent and easily accessible
policies”
• “provide any information… in an
intelligible form, using clear and plain
language, adapted to the data subject”
• Request consent in a way that is “clear,
concise, and not unnecessarily disruptive”
![Page 19: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/19.jpg)
19
How can we put people in control
over their personal information?
![Page 20: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/20.jpg)
20
![Page 21: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/21.jpg)
21
Privacy Notice Design Space
![Page 22: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/22.jpg)
22
privacy notice
timing modality controlchannel
at setup
just in time
context-dependent
periodic
persistent
on demand
primary
secondary
public
visual
auditory
haptic
blocking
non-blocking
decoupled
machine-readable
F. Schaub, R. Balebako, A. Durity, L.F. Cranor, A Design Space for
Effective Privacy Notices, SOUPS’15
Privacy notice design space
![Page 23: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/23.jpg)
23
privacy notice
timing modality controlchannel
at setup
just in time
context-dependent
periodic
persistent
on demand
![Page 24: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/24.jpg)
24
privacy notice
timing modality controlchannel
at setup
just in time
context-dependent
periodic
persistent
on demand
![Page 25: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/25.jpg)
25
privacy notice
timing modality controlchannel
at setup
just in time
context-dependent
periodic
persistent
on demand
![Page 26: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/26.jpg)
26
privacy notice
timing modality controlchannel
at setup
just in time
context-dependent
periodic
persistent
on demand
![Page 27: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/27.jpg)
27
privacy notice
timing modality controlchannel
at setup
just in time
context-dependent
periodic
persistent
on demand
![Page 28: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/28.jpg)
28
privacy notice
timing modality controlchannel
at setup
just in time
context-dependent
periodic
persistent
on demand
![Page 29: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/29.jpg)
29
privacy notice
timing modality controlchannel
at setup
just in time
context-dependent
periodic
persistent
on demand
![Page 30: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/30.jpg)
30
privacy notice
timing modality controlchannel
primary
secondary
public
![Page 31: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/31.jpg)
31
privacy notice
timing modality controlchannel
primary
secondary
public
![Page 32: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/32.jpg)
32
privacy notice
timing modality controlchannel
primary
secondary
public
![Page 33: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/33.jpg)
33
privacy notice
timing modality controlchannel
primary
secondary
public
http://www.offlinetags.net/
![Page 34: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/34.jpg)
34
privacy notice
timing modality controlchannel
visual
auditory
haptic
machine-readable
![Page 35: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/35.jpg)
35
privacy notice
timing modality controlchannel
visual
auditory
haptic
machine-readable
![Page 36: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/36.jpg)
36
privacy notice
timing modality controlchannel
visual
auditory
haptic
machine-readable
“this call will be recorded for
training purposes”
![Page 37: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/37.jpg)
37
privacy notice
timing modality controlchannel
visual
auditory
haptic
machine-readable
htt
p:/
/w
ww
.co
rofl
ot.
co
m/d
avi
dsw
ee
ne
y/o
lfa
cto
ry-d
isp
lay
![Page 38: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/38.jpg)
38
privacy notice
timing modality controlchannel
visual
auditory
haptic
machine-readable
![Page 39: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/39.jpg)
39
privacy notice
timing modality controlchannel
blocking
non-blocking
decoupled
![Page 40: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/40.jpg)
40
privacy notice
timing modality controlchannel
blocking
non-blocking
decoupled
![Page 41: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/41.jpg)
41
privacy notice
timing modality controlchannel
blocking
non-blocking
decoupled
![Page 42: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/42.jpg)
42
privacy notice
timing modality controlchannel
blocking
non-blocking
decoupled
![Page 43: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/43.jpg)
43
just-in-time, primary
visual, blocking
periodic, primary
visual, blocking
persistent, primary
visual, non-blocking
on demand,
primary
visual,
decoupled
at setup, primary
visual, blocking
on demand, secondary
visual, decoupled
Layered examples from iOS
![Page 44: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/44.jpg)
44
Attempts at improving
notice & choice
![Page 45: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/45.jpg)
45
Attempt: Machine-
readable privacy policies
![Page 46: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/46.jpg)
46
Let your computer read for you
• Platform for Privacy
Preferences (P3P)
• W3C specification for
XML privacy policies
– Proposed 1996
– Adopted 2002
• Optional P3P compact
policy HTTP headers to
accompany cookies
• Lacks incentives for
adoption
![Page 47: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/47.jpg)
47
P3P in Internet Explorer
• P3P implemented in
IE 6, 7, 8, 9, 10 …
• Default privacy setting
– Rejects third-party
cookies without a CP
– Rejects unsatisfactory
third-party cookies
![Page 48: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/48.jpg)
48
No P3P syntax checking in IE
• IE accepts P3P policies containing bogus tokens
or missing required tokens
• Example of valid compact policy:
• Examples of invalid policies accepted by IE:
P. Leon, L. Cranor, A. McDonald, and R. McGuire. Token Attempt: The
Misrepresentation of Website Privacy Policies through the Misuse of P3P
Compact Policy Tokens. WPES 2010.
AMZN
Facebook does not have a P3P policy.
Learn why here: http://fb.me/p3p
CAO DSP COR CURa ADMa DEVa OUR
IND PHY ONL UNI COM NAV INT DEM PRE
![Page 49: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/49.jpg)
49
![Page 50: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/50.jpg)
50
Impact of privacy information on decision
making Online shopping study conducted at CMU lab
Paid participants to make online purchases with their own credit cards, exposing their own personal information
Participants paid fixed amount and told to keep the change – real tradeoff between money and privacy
Studies demonstrate that when readily accessible and comparable privacy information is presented in search results, many people will pay more for better privacy
J. Tsai, S. Egelman, L. Cranor, and A. Acquisti. The Effect of Online Privacy Information on Purchasing Behavior: An Experimental Study. WEIS 2007. http://weis2007.econinfosec.org/papers/57.pdf
S. Egelman, J. Tsai, L. Cranor, and A. Acquisti. 2009. Timing is Everything? The Effects of Timing and Placement of Online Privacy Indicators. CHI2009. http://www.guanotronic.com/~serge/papers/chi09a.pdf
http://privacyfinder.org/
![Page 51: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/51.jpg)
51
Attempt: Personalized
privacy assistants
![Page 52: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/52.jpg)
52
Personal privacy assistants
![Page 53: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/53.jpg)
53
Attempt: Make your own
machine-readable
privacy policies
![Page 54: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/54.jpg)
54
Use NLP to read policies
• Usableprivacy.org
• It’s a hard problem
• Annotated corpus machine learning
![Page 55: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/55.jpg)
55
Attempt: Crowdsourcing
![Page 56: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/56.jpg)
56
Terms of Service; Didn’t Read
![Page 57: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/57.jpg)
57
Attempt: Standardized
notices
![Page 58: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/58.jpg)
58
Privacy Facts
Privacy Facts
Privacy Facts
Privacy
Facts
![Page 59: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/59.jpg)
59
Towards a privacy
“nutrition label”
• Standardized format
– People learn where to find answers
– Facilitates policy comparisons
• Standardized language
– People learn terminology
• Brief
– People find info quickly
• Linked to extended view
– Get more details if needed
![Page 60: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/60.jpg)
60
Iterative design process
• Series of studies
– Focus groups
– Lab studies
– Online studies
• Metrics
– Reading-comprehension (accuracy)
– Time to find information
– Ease of policy comparison
– Subjective opinions, ease, fun, trust
P.G. Kelley, J. Bresee, L.F. Cranor, and R.W.
Reeder. A “Nutrition Label” for Privacy. SOUPS
2009.
P.G. Kelley, L.J. Cesca, J. Bresee, and L.F. Cranor.
Standardizing Privacy Notices: An Online Study
of the Nutrition Label Approach. CHI 2010.
![Page 61: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/61.jpg)
61
Standardized financial notices
• Gramm-Leach-Bliley Act mandated annual
disclosures
• In 2009, regulators created a
recommended form
– High adoption because of safe harbor
![Page 62: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/62.jpg)
62
Standardized financial notices
![Page 63: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/63.jpg)
63
Standardized financial notices
![Page 64: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/64.jpg)
64
Standardized financial notices
![Page 65: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/65.jpg)
65
Standardized financial notices
![Page 66: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/66.jpg)
66
Standardized financial notices
• Built a parser and built an online database
• Lets people compare practices
• https://cups.cs.cmu.edu/bankprivacy
![Page 67: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/67.jpg)
67
Messing up standardized notices
![Page 68: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/68.jpg)
68
Attempt: Improve timing
![Page 69: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/69.jpg)
69
Privacy label for Android
![Page 70: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/70.jpg)
70
Attempt: Icons
![Page 71: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/71.jpg)
71
http://www.azarask.in/blog/post/privacy-icons/ 2010
![Page 72: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/72.jpg)
72
Attempt: Standardized
disclosure icons
![Page 73: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/73.jpg)
73
What Do Online Behavioral
Advertising Disclosures
Communicate to Users?
Pedro Giovanni Leon, Justin
Cranshaw, Lorrie Faith Cranor,
Jim Graves, Manoj Hastak, Blase
Ur, and Guzi Xu. WPES 2012
![Page 74: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/74.jpg)
74
![Page 75: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/75.jpg)
75
The industry claims total success
“The DAA has revolutionized consumer
education and choice by delivering a real-
time, in-ad notice more than 10 billion times
every day through the increasingly ubiquitous
DAA Advertising Option Icon (also known as
the ‘Ad Choices’ Icon)” Peter Kosmala, Former Managing Director of The Digital Advertising Alliance. Yes, Johnny Can Benefit From Transparency and Control. November 3, 2011.
![Page 76: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/76.jpg)
76
Objectives
• Evaluate the effectiveness of different OBA
disclosures at communicating notice and
choice about OBA
• Find ways to improve effectiveness of
OBA disclosures
![Page 77: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/77.jpg)
77
Methodology
• Large scale between-subjects online study
– 1,505 participants
– Over 100 participants per treatment
• Participants recruited through Amazon
Mechanical Turk
• Guided browsing scenario
• Online survey
![Page 78: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/78.jpg)
78
First exposure to OBA disclosures
![Page 79: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/79.jpg)
79
Second exposure to OBA disclosures
• Why did I get this ad?
• Interest based ads
• AdChoices
• Sponsor ads
• Learn about your ad
choices
• Configure ad preferences
• ‘No tagline’
![Page 80: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/80.jpg)
80
Do icons and taglines suggest
tailored ads?
• To what extent, if any, does this
combination of the symbol and phrase,
placed on the top right corner of the above
ad suggest the following?
– This ad has been tailored based on websites
you have visited in the past. [true]
![Page 81: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/81.jpg)
81
![Page 82: 11. Privacy Notice and Choice - University of Chicago](https://reader031.vdocument.in/reader031/viewer/2022020916/61a9d3d2b36480374a4e975b/html5/thumbnails/82.jpg)
82
Takeaways
• OBA icons and taglines are not noticed
• “AdChoices” was outperformed by other
tagline treatments at communicating
notice and choice about OBA
• Users are afraid to click on icon