The impact of transparency on mobile privacy decision making
- PDF / 1,628,568 Bytes
- 19 Pages / 595.224 x 790.955 pts Page_size
- 47 Downloads / 206 Views
RESEARCH PAPER
The impact of transparency on mobile privacy decision making Jan Hendrik Betzing1
¨ Becker1 · Matthias Tietz2 · Jan vom Brocke2 · Jorg
Received: 24 May 2018 / Accepted: 8 January 2019 © Institute of Applied Informatics at University of Leipzig 2019
Abstract Smart devices provide unprecedented access to users’ personal information, on which businesses capitalize to offer personalized services. Although users must grant permission before their personal information is shared, they often do so without knowing the consequences of their decision. Based on the EU General Data Protection Regulation, which mandates service providers to comprehensively inform users about the purpose and terms of personal data processing, this article examines how increased transparency regarding personal data processing practices in mobile permission requests impact users in making informed decisions. We conducted an online experiment with 307 participants to test the effect of transparency on users’ decisions about and comprehension of the requested permission. The results indicate increased comprehension of data processing practices when privacy policies are transparently disclosed, whereas acceptance rates do not vary significantly. We condense our findings into principles that service providers can apply to design privacy-transparent mobile apps. Keywords Mobile privacy decision making · Transparency · EU General Data Protection Regulation · Privacy notice · Consent · Experimental research
Introduction Smart devices, which collect personal information such as users’ location, calendar, and contacts, allow for new app-based business models that provide location-based (e.g., navigation, targeted advertising), social (e.g., friend finder, social networks), and personalized (e.g., mobile recommendations, mobile banking) services (Dhar and Responsible Editor: Mark de Reuver Jan Hendrik Betzing
[email protected] Matthias Tietz [email protected] Jan vom Brocke [email protected] J¨org Becker [email protected] 1
European Research Center for Information Systems, University of M¨unster, Leonardo-Campus 3, 48149 M¨unster, Germany
2
Institute of Information Systems, University of Liechtenstein, F¨urst-Franz-Josef-Strasse, 9490 Vaduz, Liechtenstein
Varshney 2011; Tan et al. 2014). Such networked business models have substantial implications for data privacy because personal information is shared between and processed by a high number of actors (Wohlgemuth et al. 2014). Mobile operating systems feature safeguards against unauthorized access to personal information, and apps must request permission from users for these services prior to installation or at runtime (Aydin et al. 2017; Balebako et al. 2015). App providers can enrich runtime permission requests with custom explanations by adding a textual description to the mobile operating systems’ inbuilt formal request dialogues (Tan et al. 2014). Alternatively, apps can present one or more dedicated screens that provide visual and textu
Data Loading...
