Expectation Of Privacy Research Articles

Speaking in Private: Privacy Expectations Depend on Communication Modality

Consumers disclose personal information when they interact with connected technologies. The advent of voice technology has enabled consumers to interact with connected technologies not only through typing but also through speaking. The present research investigates whether consumers expect different levels of privacy for information they disclose via different communication modalities. The results of three studies suggest that consumers have more restrictive privacy expectations for information disclosed via speech as compared with text. The studies probe the viability of several mechanisms that may drive this effect and test practically relevant moderators. The results suggest that the effect is driven, at least in part, by increased feelings of ownership over content disclosed via speech as compared with text. Of relevance to multiple stakeholders, the article discusses implications for privacy regulation, privacy-preserving application design, targeted advertising, and the “privacy paradox.” This paper has been This paper was accepted by Catherine Tucker for the Special Issue on the Human-Algorithm Connection. Funding: This work was supported by Marketing Science Institute [4001309], NYU Stern Center for Global Economy and Business. Supplemental Material: The online appendix and data files are available at https://doi.org/10.1287/mnsc.2022.03954 .

Navigating ethical challenges in online wildlife trade research.

The surge in internet accessibility has transformed wildlife trade by facilitating the acquisition of wildlife through online platforms. This scenario presents unique ethical challenges for researchers, as traditional ethical frameworks for in-person research cannot be readily applied to the online realm. Currently, there is a lack of clearly defined guidelines for appropriate ethical procedures when conducting online wildlife trade (OWT) research. In response to this, we consulted the scientific literature on ethical considerations in online research and examined existing guidelines established by professional societies and ethical boards. Based on these documents, we present a set of recommendations that can inform the development of ethically responsible OWT research. Key ethical challenges in designing and executing OWT research include the violation of privacy rights, defining subjects and illegality, and the risk of misinterpretation or posing risks to participants when sharing data. Potential solutions include considering participants' expectations of privacy, defining when participants are authors versus subjects, understanding the legal and cultural context, minimizing data collection, ensuring anonymization, and removing metadata. Best practices also involve being culturally sensitive when analyzing and reporting findings. Adhering to these guidelines can help mitigate potential pitfalls and provides valuable insights to editors, researchers, and ethical review boards, enabling them to conduct scientifically rigorous and ethically responsible OWT research to advance this growing field.

DPKnob: A visual analysis approach to risk-aware formulation of differential privacy schemes for data query scenarios

Differential privacy is an essential approach for privacy preservation in data queries. However, users face a significant challenge in selecting an appropriate privacy scheme, as they struggle to balance the utility of query results with the preservation of diverse individual privacy. Customizing a privacy scheme becomes even more complex in dealing with queries that involve multiple data attributes. When adversaries attempt to breach privacy firewalls by conducting multiple regular data queries with various attribute values, data owners must arduously discern unpredictable disclosure risks and construct suitable privacy schemes. In this paper, we propose a visual analysis approach for formulating privacy schemes of differential privacy. Our approach supports the identification and simulation of potential privacy attacks in querying statistical results of multi-dimensional databases. We also developed a prototype system, called DPKnob, which integrates multiple coordinated views. DPKnob not only allows users to interactively assess and explore privacy exposure risks by browsing high-risk attacks, but also facilitates an iterative process for formulating and optimizing privacy schemes based on differential privacy. This iterative process allows users to compare different schemes, refine their expectations of privacy and utility, and ultimately establish a well-balanced privacy scheme. The effectiveness of this study is verified by a user study and two case studies with real-world datasets.

Consumer Privacy Expectations and the Impact on Buying Intentions

Based on past research and attitudinal theories, this study intends to investigate the effect of attitudes about data privacy protection and disclosure and the perception of corporate data privacy performance on future purchase intention. Additionally, it seeks to understand the relationship between purchase behavior intensity, personal data privacy concerns and privacy expectations (attitude). A total of 271 usable surveys were gathered from United States consumers and analyzed by two multiple linear regression models and correlation analysis. The results show that attitude (data privacy protection and disclosure responsibility) and perceptions about corporate data privacy performance predict purchase intention. Furthermore, past purchase behavior intensity and personal data privacy concerns influence corporate data privacy responsibility attitudes. This study extends the current data privacy literature by understanding how data privacy expectations (attitude) and data privacy performance perceptions impact purchase intent and are influenced by personal data privacy concerns and purchase behavior.

Results of the Sukuma Ndoda ("Stand up, Man") HIV Self-Screening and Assisted Linkage to Care Project in Johannesburg: A Quasi-Experimental Pre-Post Evaluation.

HIV testing rates among South African men lag behind rates for women and national targets. Community-based HIV self-screening (HIVSS) distribution and follow-up by community health workers (CHWs) is a scalable option to increase testing coverage, diagnosis, and treatment initiation. We provided HIVSS and assisted linkage to care to men not recently tested (within the past 12 months) residing in high-HIV-burden areas of Johannesburg. CHWs distributed HIVSS in 6 clinic catchment areas. Follow-up to encourage confirmatory testing and antiretroviral therapy initiation was conducted through personal support (PS) or an automated short message service (SMS) follow-up and linkage system in 3 clinic areas each. Using a quasi-experimental pre-post design, we compared differences in the proportion of men testing in the clinic catchment areas during the HIVSS campaign (June-August 2019) to the 3 months prior (March-May 2019) and compared treatment initiations by assisted linkage strategy. Among 4793 participants accepting HIVSS, 62% had never tested. Among 3993 participants with follow-up data, 90.6% reported using their HIVSS kit. Testing coverage among men increased by 156%, from under 4% when only clinic-based HIV testing services were available to 9.5% when HIVSS and HIV testing services were available (z = -11.6; P < 0.01). Reported test use was higher for men followed through PS (99% vs. 68% in SMS); however, significantly more men reported reactive self-test results in the SMS group compared with PS (6.4% vs. 2.0%), resulting in more antiretroviral therapy initiations in the SMS group compared with PS (23 vs. 9; P < 0.01). CHW HIVSS distribution significantly increases testing among men. While PS enabled personalized follow-up, reporting differences indicate SMS is more acceptable and better aligned with expectations of privacy associated with HIVSS.

"I need a better description": An Investigation Into User Expectations For Differential Privacy

Despite recent widespread deployment of differential privacy, relatively little is known about what users think of differential privacy. In this work, we seek to explore users' privacy expectations related to differential privacy. Specifically, we investigate (1) whether users care about the protections afforded by differential privacy, and (2) whether they are therefore more willing to share their data with differentially private systems. Further, we attempt to understand (3) users' privacy expectations of the differentially private systems they may encounter in practice and (4) their willingness to share data in such systems. To answer these questions, we use a series of rigorously conducted surveys (n=2424). We find that users care about the kinds of information leaks against which differential privacy protects and are more willing to share their private information when the risks of these leaks are less likely to happen. Additionally, we find that the ways in which differential privacy is described in-the-wild haphazardly set users' privacy expectations, which can be misleading depending on the deployment. We synthesize our results into a framework for understanding a user's willingness to share information with differentially private systems, which takes into account the interaction between the user's prior privacy concerns and how differential privacy is described.

Accessing third-party research databases for criminal investigations: Enhancing legal protections and safeguarding public interests

Recent expansions in databases containing clinical, research, or genetic information have created opportunities for other uses which differ from their original purposes. Legislative changes in some jurisdictions broadening the powers of law enforcement agencies to access these databases for criminal investigations have renewed concerns regarding protecting public safety through DNA profiling for criminal investigations and defending individuals’ interests in protecting their personal information. This article addresses the ethical and legal considerations around the widening of law enforcement agencies’ powers to collect DNA information and potential access to DNA databases for criminal investigations, focusing on the recent developments in Singapore in comparison with selected jurisdictions. It advocates for a tiered access approach to third-party research databases for specific crimes only. A tiered access approach facilitates the aims of safeguarding public interests through appropriate exercise of access powers, protecting individuals’ expectations of privacy of their personal information contained in these databases and supporting the continued sustainability of third-party research databases.

Dirbtinio intelekto taikymo įmonių vidaus tyrimuose teisinės ribos ir baudžiamieji procesiniai padariniai

The paper addressed the following questions: how can AI be applied in corporate internal investigations and what are the legal limits for its use? In case of effective application, how can it affect the admissibility and valuation of the information collected from these procedures in an eventual criminal lawsuit? It was demonstrated that, with the expectation of increasing the effectiveness and efficiency of compliance programs, AI has been used in real-time – and often predictive – supervision of employees, as well as in carrying out internal investigations, through, for example, lie detection systems. However, due to the limitations and risks of this technology, its employment must comply with legal parameters and restrictions. Therefore, three categories of restrictions were analyzed: with respect to (i) legal requirements for data processing, we noted that the processing of data to be used as input in those systems must find legal support in one of the hypotheses provided for in Articles 6 and 9(2) of the GDPR. Furthermore, the fundamental principles that substantiate the test of proportionality between the intended purpose and the intervention to be carried out, provided for in Article 5, must be observed. Regarding (ii) possible prohibitions on the use of AI systems in the context of internal investigations, we observed that the use of technologies to control and supervise the work environment must take into account the requirements of legality, shall not affect areas in which employees’ expectations of privacy must prevail, and, lastly, must observe a second test of proportionality, aimed at assessing whether the technology in question is adequate and necessary to achieve the purpose intended with it and whether the rights possibly affected by it should not prevail. About the (iii) limits to the admissibility and valuation of elements of information from internal investigations, we concluded that their admission in criminal proceedings will depend on a new judgment of legality and proportionality. In addition, they may be admitted when presented by the company, in its defence, or by Public Prosecution, provided that a third test of proportionality is observed and that these elements of information are not considered sufficient to substantiate the conviction of any defendant, therefore having probative value similar to elements from state investigation acts.

Getting it Just Right: Towards Balanced Utility, Privacy, and Equity in Shared Space Sensing

Low-cost sensors have enabled a wide array of data-driven applications and insights. As a result, encountering spaces with pervasive sensing has become all but unavoidable. This creates a fundamental tension: the success of smart environments will become increasingly dependent on equity of access to data-driven insights and consideration of the privacy expectations of sensed individuals. These concerns highlight the need to bring equity to all stakeholders of smart environments, which in turn would preserve public trust in these smart spaces. In this work, we explored several approaches to identity-obscuring visual representations through a progressive series of experiments. We designed and validated a series of visual representations through stakeholder interactions and tested the ability of these visual representations to limit identification via a crowdsourced study. An evaluation across three months of data gathered within our organization also showed that the identity-obscured data could still be leveraged to accurately count group size. Our contributions lay the groundwork for sensing frameworks that bring utility to all stakeholders of shared spaces while being cognizant of their diverse privacy expectations.

Youth and Guardian Expectations of Privacy in Adolescent Health Care

PurposeAdolescent access to confidential care is codified by most states with age-specific laws; however, adolescent and guardian awareness of these laws are poorly understood. In this study, we assessed adolescent and guardian perceptions of conditional confidentiality in health care. MethodsWe surveyed youth aged 11–18 years, and guardians accompanying youth seeking care at an urban adolescent outpatient clinic that provides adolescent primary and subspecialty care. Participants completed brief True/False surveys which queried whether a parent would be notified for common, hypothetical scenarios. We analyzed adolescent responses by age group and compared responses of adolescents and guardians. ResultsTwo hundred seventy nine adolescents and 178 guardians completed the survey. Among participants, 86% of adolescents and 67% of guardians believed they understood which health topics were confidential. Adolescent and guardian answers aligned with mandatory reporting laws for scenarios concerning safety and suicidality. Younger adolescents consistently underestimated their legal right to privacy for all hypothetical scenarios. Many adolescents anticipated disclosure to parents for confidential services, including contraception, pregnancy, and sexually transmitted infection testing. Guardians expected disclosure about sexual health services at higher rates than they did about substance use. DiscussionWe identified age-associated knowledge gaps among participants pertaining to adolescent privacy in the clinical setting. These deficits were found in a setting where adolescent privacy is routinely discussed, and our findings may underestimate the knowledge gap in the general pediatric population where confidentiality may not be discussed as often. Providers caring for adolescents share the responsibility of educating both youth and families about the importance of adolescent confidentiality.

A personal information privacy perceptions model for university students

ABSTRACT This study aims to address the lack of personal information privacy policies in Zimbabwean universities by proposing and validating a Student Personal Information Privacy Perception (SPIPP) model. The model helps institutions understand and implement data privacy principles based on students’ perceptions. The students’ perceptions were determined for the following privacy constructs: privacy awareness; privacy expectations; and student confidence in the university’s data privacy practices. In this study, a quantitative research method using a cross-sectional survey with a closed-ended questionnaire was adopted to collect data from 284 student participants. To refine the preliminary instrument, an expert review and pilot study were conducted. The privacy model was validated using confirmatory factor analysis (CFA) and structural equation modeling (SEM). Seven new factors emerged from the validation of the instrument: university confidence; practice confidence; individual awareness; privacy awareness; external awareness; privacy expectations; and correctness expectations. SEM showed a good overall match between the suggested conceptual model and the empirically derived model. The validated questionnaire that was developed can be used by universities to ascertain students’ perceptions of privacy to create a culture of privacy and to protect student data in line with regulatory requirements and best practices.

Identifying undefined risks: A risk model and a privacy risk identification measure in the privacy impact assessment process

Privacy impact assessment (PIA) has attracted the attention of privacy watchdogs and researchers for decades. This study focuses on a risk model and risk identification method, which are two crucial elements of the risk identification step in the PIA process. As a preparatory work, this article reviews national and international organizations’ current templates and guidelines and finds that PIA guidance includes multiple domains but rarely provide a risk model or a systematic risk identification method. Based on the analysis, our study offers a risk model that can capture various privacy risk realization processes. It further proposes a combination of risk identification methods that correspond to the main target domains in the PIA and the proposed risk model. This combination consists of privacy principles of a given personal information or privacy rule to check compliance with the rule, and our suggested list of risk factors is useful in inductively finding potential risk scenarios that violate social expectations of privacy.

PRIVACY OF OLDER ADULTS

Introduction: In contrast to hiding specific things, privacy concerns protecting one’s right to self-control and autonomy, which accompanies everyone’s existence. In the healthcare sector, older adults’ thoughts about privacy should be evaluated relative to those of nurses to understand how the concept of privacy is perceived and whether necessary attention is given to the subject. Materials and Method: This was a descriptive study. A sociodemographic Information Form and Patient Privacy Scale were used. After the necessary institutional and ethical permissions were obtained, face-to-face data were collected from 926 older adults and 788 nurses from six public and four university hospitals. Results: The mean scores of the Patient Privacy Scale were 4.78±0.14 for nurses and 3.78±0.32 for older adults, which were significantly different (p≤0.001). In addition, when the Patient Privacy Scale scores of the nurses were evaluated according to sociodemographic data, no significant differences were found between the Patient Privacy Scale scores and scale subdimensions and sociodemographic data (p&gt;0.05). In contrast, a significant difference was found between the scale and scale subdimensions in older adults (p≤0.05). Conclusion: When nurses communicate with older adults, they create a healthier environment in terms of privacy by considering older adults’ expectations of privacy, taking measures to protect privacy, and providing training on the subject. Keywords: Privacy; Aged; Nurses; Ethics, Medical.

Cultivation of human centered artificial intelligence: culturally adaptive thinking in education (CATE) for AI.

Artificial Intelligence (AI) has become ubiquitous in human society, and yet vast segments of the global population have no, little, or counterproductive information about AI. It is necessary to teach AI topics on a mass scale. While there is a rush to implement academic initiatives, scant attention has been paid to the unique challenges of teaching AI curricula to a global and culturally diverse audience with varying expectations of privacy, technological autonomy, risk preference, and knowledge sharing. Our study fills this void by focusing on AI elements in a new framework titled Culturally Adaptive Thinking in Education for AI (CATE-AI) to enable teaching AI concepts to culturally diverse learners. Failure to contextualize and sensitize AI education to culture and other categorical human-thought clusters, can lead to several undesirable effects including confusion, AI-phobia, cultural biases to AI, increased resistance toward AI technologies and AI education. We discuss and integrate human behavior theories, AI applications research, educational frameworks, and human centered AI principles to articulate CATE-AI. In the first part of this paper, we present the development a significantly enhanced version of CATE. In the second part, we explore textual data from AI related news articles to generate insights that lay the foundation for CATE-AI, and support our findings. The CATE-AI framework can help learners study artificial intelligence topics more effectively by serving as a basis for adapting and contextualizing AI to their sociocultural needs.

Awareness of digital commercial profiling among adolescents in Finland and their perspectives on online targeted advertisements

ABSTRACT This study explores adolescents’ awareness of the sources that inform online profiling and their perspectives on online targeted advertisements. It employs thematic analysis to analyse eight focus group discussions (N = 38) with adolescents (13–16 years) in Finland’s capital region. The study advances research on adolescents’ knowledge of the data gathered for online profiling by highlighting that adolescents infer that apart from previous online activities, data on their verbal conversations also inform targeted advertisements. The study also advances research on adolescents’ perspectives on online targeted advertisements by identifying that adolescents’ privacy expectations in the context of targeted advertisements are that data should not be collected without their awareness and commercial entities should not use data on previous conversations for profiling. This study also pinpoints that online profiling gives some adolescents a privacy-invasive feeling of being observed, and others have a boundary until which they consider online data collection for profiling permissible. Moreover, some adolescents express ambivalent views on online targeted advertisements. The findings reflect some adolescents’ acceptance of online profiling and knowledge gaps that can inform media literacy educators. The findings raise concerns about the opacity of online commercial data-gathering practices. Therefore, we urge corporations to demystify their data collection processes.

Privacy and Security Challenges in Online social media: A Case Study Analysis

The rapid progress of online social media platforms has fundamentally reshaped how persons connect, communicate, and share information. While these platforms offer incomparable opportunities for worldwide interaction, their exponential development has introduced complex challenges concerning security and privacy. This research investigates into the complex landscape of online social media, addressing the supreme significance of safeguarding user privacy and enhancing security measures. By examining key concepts, theories, and case studies, this study puts light on the subtle balance between users' expectations of privacy and the susceptibilities essential in data collection, profiling, and cyber threats. The research examines -pivotal case studies, such as the Facebook-Cambridge Analytica scandal (2018) and the Twitter hack of 2020, to illustrate the deep implications of privacy breaches and security compromises. Through the synthesis of insights from theoretical frameworks and regulatory responses, this study presents a complete perspective on the relationship between privacy and security, underscoring the need of informed user consent, transparent data governance, and strong security mechanisms. The findings contribute to an enhanced understanding of the complex dynamics within online social media platforms, providing actionable recommendations for cultivating a safer and safer digital environment. As technology continues to advance, this research offers valuable insights for navigating the evolving challenges of the digital age while upholding fundamental principles of user privacy and data protection.

Data Privacy for Digital Asset Systems

Data privacy in digital asset systems is of sustained importance to end users. However, there can be disconnect between an end user’s expectations of privacy while using a digital asset payment system and the system’s actual treatment of collected, stored, and used data. This paper provides foundational primer on data privacy alongside qualitative and technical assessments of various approaches to data privacy frameworks and strategies relevant to the early stages of a digital asset system’s design. Analysis relies initially on an outlay of foundational data privacy concepts, including anonymity, confidentiality, and full disclosure, alongside three differing approaches to data privacy frameworks. Analysis finds that some concepts, such as a desire for “cash-like anonymity,” are based on false underlying assumptions. The paper moves away from a likely unattainable standard of anonymity and instead focuses on a hybrid approach to data privacy, inclusive of Cavoukian’s privacy-by-design and popular applications of privacy-by-policy. This hybrid approach is visualized with a technical comparison of privacy-enhancing technologies (PET) across architectural layers, detailing both popular and emerging PETs relevant to digital asset systems which prioritize a hybrid approach to confidentiality. The paper further finds that a particular combination of popular and emerging technologies may provide as-yet untested but novel benefits to maintaining strong confidentiality – and possibly end users’ expectations of privacy – while data is under audit. A nuanced approach, rather than a reliance on a singular novel PET or dubious assurances of anonymity, may best facilitate strong confidentiality with sustainable end-user privacy protections for digital asset system users.

Platform rules as privacy tools: The influence of screenshot accountability and trust on privacy management

Society has normalized the use of the screenshot feature to surreptitiously capture and share private digital messages. While screenshots have utilitarian purposes, we provide evidence that this feature enables violations of interpersonal privacy expectations. In addition, we extend communication privacy management (CPM) theory beyond its interpersonal limitations to include platforms as privacy rulemakers through explicit cues and embedded trust. We conducted a 2(Accountability cue: present or absent) × 3(Platform trust: high, low, control) between-subjects experiment to understand their conditional impact on control over and disclosure of personal and co-owned information within a proposed digital messaging platform ( N = 307). Our experimental results showcase the power of a screenshot accountability cue and platform trust on privacy perceptions and management within messaging platforms. Implications for design against the screenshot feature are discussed.

Toward an open access genomics database of South Africans: ethical considerations.

Genomics research holds the potential to improve healthcare. Yet, a very low percentage of the genomic data used in genomics research internationally relates to persons of African origin. Establishing a large-scale, open access genomics database of South Africans may contribute to solving this problem. However, this raises various ethics concerns, including privacy expectations and informed consent. The concept of open consent offers a potential solution to these concerns by (a) being explicit about the research participant's data being in the public domain and the associated privacy risks, and (b) setting a higher-than-usual benchmark for informed consent by making use of the objective assessment of prospective research participants' understanding. Furthermore, in the South African context-where local culture is infused with Ubuntu and its relational view of personhood-community engagement is vital for establishing and maintaining an open access genomics database of South Africans. The South African National Health Research Ethics Council is called upon to provide guidelines for genomics researchers-based on open consent and community engagement-on how to plan and implement open access genomics projects.

The benefits of meeting buyer privacy expectations across information, time, and space dimensions

Business-to-business (B2B) research has yet to address managerial concerns about privacy security. Privacy breaches are a growing global epidemic and cause substantial disruptions. Extending work from the consumer domain, this research introduces the notion that buyers have expectations regarding privacy security beyond information protection. They have expectations that include time and space protection as well. This research posits that suppliers often overstep these expectations by misusing buyers' personal information and intruding upon their private time and space. Building on the meeting privacy expectations (MPE) theoretical framework, this research investigates the benefits of suppliers meeting/exceeding privacy expectations. Results from 385 buyers indicate that MPE has a positive effect on privacy trust and satisfaction. MPE plays a critical role in reducing privacy emotional violation which affects outcomes including privacy satisfaction and intentions to do business. Trust in privacy activities helps increase privacy satisfaction and intentions to do business, and bolsters buyer-supplier relationship commitment. The positive impact of MPE persists when testing for only time and space dimensions suggesting the importance of time and space privacy. This research provides several theoretical and managerial contributions.