91�ȱ�

User research findings

Three categories of attitudes towards privacy

Categories were identified by Westin (1967), and used as a basis for understanding some of the attitudes of users (Liu, C. et al. 2004, Iachello, G. and Hong, J. 2007, Langheinrich, M. 2001). Although the percentages change across different studies – in general about half of the population are privacy pragmatists, they are aware of privacy implications and take care when considering activities that may put their data at risk. The next group, the unconcerned individuals, are the least cautious. The smallest group, the fundamentalists are the most reluctant to disclose personal information about themselves, also this group are more likely to have been victims of identify theft or similar security breaches.

Comfort levels – some information is more sensitive than others

When surveyed on which information participants are always or usually comfortable disclosing ��- the results showed that most were comfortable disclosing personal preferences, such as a favourite TV show or snack, and email addresses. About half were comfortable disclosing their full name and postal address, and then fewest were comfortable disclosing health information, phone numbers or credit cards. Interestingly - although full name and address could be used to contact someone directly, they were less likely to disclose their phone number (Liu, C. et al. 2004). However, as a study of Facebook users listed fear of being stalked as a concern, address information in this context would have been rated lower (Strater, K., and Richter Lipford, H. 2008). This is an example of different results for different contexts.

Dichotomy between what users say they will disclose vs. what they actually disclose

Although survey data is problematic, as self-reporting preferences do not reflect real world behaviour, this paradox is not unique to survey results (Liu, C. et al. 2004).

There is a difference in what people say they will disclose and what they actually disclose probably because decisions are based on the potential benefits users expect to receive (Bachelor, G. and Hong, J. 2007, Wang. 2010, ��Mathiasen, N. R. and Bødker, S. 2011). An explanation for the dichotomy is that in reality, security decisions do not occur in isolation, so trying to understand them out of context is unrealistic, and can result in unrealistic findings.

Benefits override privacy concerns – even with extreme data logging

When the benefits of logging or collecting personal information are compelling, users will disclose more information than researchers expect; even personally sensitive mobile phone data, as explored in a field study using auto persistent logging on mobile phones (Kärkkäinen, T. et al. 2010). The study found that users didn’t feel their privacy was threatened because the benefits overshadowed and outweighed their initial concerns. The benefits users identified were simply an interest in looking back on what they had done using their mobiles. The only concern participants had with the system was that logged text messages were stored behind a relatively simple password. Also, surprising, when asked about controlling or deleting their data, most preferred to have everything logged for fear of missing out or forgetting things they had done.

Work around and hacks for controlling private data

Even when using a relatively public space to share private information, if users feel that their data will be put risk by the service they want to use, they can sometimes find workarounds to use it in the way they want. For example (Lange, P.G. 2008) a year long ethnographic study of the use of YouTube included participants sharing private videos with friends and family. ��There is a private option available, which felt too restrictive, as all family members would need a YouTube account to access the video. Workarounds employed to protect privacy include limited or vague tags and cryptic references. Participants also monitored the view count of videos to ensure it hadn’t become too public. In fact, Don Norman (2009) states that the more secure a system is designed to be, the less secure it gets as people find workarounds and adaptations to be able to do the thing they want to do when privacy and security gets in the way.��

Users want to be in control of their data….

Control over data is the main privacy user requirement. In line with Westin’s findings (1967) – they want to know what will be done with their data and they want to control what is done with it. In a study (Liu, C. et al. 2004), participants said that they were against automatic data transfer partly because it removed or limited their control over what their data would be used for and by whom.

��“I want to be in charge of all information sent to other companies. Just because they are similar, doesn’t mean I [want] my information shared with them.”��

��“I want to be in control of what is done. This way I know what was done,” and “I don’t want anything sent automatically. I want to check out everything I am applying for.”

…however, managing data is a task usually done once, and rarely returned to��

When interviewing Facebook users, although concerned about the visibility of their personal information, it was identified that adjusting privacy settings is a one-time action, rarely revised. Participants adjusted their privacy settings once the limitations of their current ones were revealed to them; either by the researchers or when they experienced a breach of their privacy (Strater, K., and Richter Lipford, H. 2008). However, the issue remains that the system itself didn’t make the ongoing implications of past privacy decisions clear - despite selecting privacy settings, user’s private data was more visible than they thought.

Conclusion

When building systems that incorporate privacy and security implications - we can make assumptions and best guesses on user responses, but based on the evidence, we won’t really know how end users will respond until they are able to sample the experience for themselves.

References

Iachello, G. and Hong, J. (2007). End-user privacy in human-computer interaction. Found. Trends Hum.-Comput. Interact., 1:1-137.

Kärkkäinen, T., Vaittinen, T., and Väänänen-Vainio-Mattila, K. (2010). I don't mind being logged, but want to remain in control: a field study of mobile activity and context logging. In Proceedings of the 28th international conference on Human factors in computing systems (CHI '10). ACM, New York, NY, USA, 163-172

Lange, P. G. (2008). Publicly private and privately public: Social networking on YouTube. Journal of Computer-Mediated Communication, 13(1):361-380.

Liu, C., Marchewka, J. T,. ��Lu, J., and Yu. C-S,. (2004). Beyond concern: a privacy-trust-behavioral intention model of electronic commerce. Inf. Manage. 42, 1

Mathiasen, N. R. and Bødker, S. (2011). Experiencing security in interaction design. In Proceedings of the 2011 annual conference on Human factors in computing systems (CHI '11). ACM, New York, NY, USA

Norman, D. A. (2009). The way I see it: When security gets in the way. interactions 16, 6 (November 2009), 60-63.

Schaar, P. (2010). Privacy by design. Identity in the Information Society, 3(2):267-274.

Strater, K., and Richter Lipford, H. (2008). Strategies and struggles with privacy in an online social networking community. In Proceedings of the 22nd British HCI Group Annual Conference on People and Computers: Culture, Creativity, Interaction - Volume 1 (BCS-HCI '08), Vol. 1. British Computer Society, Swinton, UK, UK, 111-119.

Wang,Y. (2010). Respecting User Privacy in Cross-System Personalization. Downloaded 17th November 2011 from

Westin, A. F. (1967).��Privacy and Freedom. New York, NY: Atheneum

��