Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
To Be, or Not to Be Notified: Eliciting Privacy Notification Preferences for Online mHealth Services
Karlstad University, Faculty of Health, Science and Technology (starting 2013), Department of Mathematics and Computer Science (from 2013).
Karlstad University, Faculty of Health, Science and Technology (starting 2013), Department of Mathematics and Computer Science (from 2013).
(English)Manuscript (preprint) (Other academic)
Abstract [en]

Millions of people are tracking and quantifying their fitness and health, and entrust online mobile health (mhealth) services with storing and processing their sensitive personal data. Ex post transparency-enhancing tools (TETs) enable users to keep track of how their personal data are processed, and represent important building blocks to understand privacy implications and control one’s online privacy. Particularly, privacy notifications provide users of TETs with the insight necessary to make informed decision about controlling their personal data that they have disclosed previously. To investigate the notification preferences of users of online mhealth services, we conducted an online study. We analysed how notification scenarios can be grouped contextually, and how user preferences with respect to being notified relate to intervenability. Moreover, we examined to what extent ex post notification preferences correlate with privacy personas established in the context of trust in and reliability of online data services. Based on our findings, we discuss the implications for the design of usable ex post TETs.

Keywords [en]
privacy, transparency-enhancing tool, usability, personas, mhealth
National Category
Human Computer Interaction Other Computer and Information Science
Research subject
Computer Science
Identifiers
URN: urn:nbn:se:kau:diva-71118OAI: oai:DiVA.org:kau-71118DiVA, id: diva2:1289389
Note

The manuscript is currently under submission and represent a preliminary entry created to satisfy the prerequisites for the licentiate thesis. The record will be finalised and adapted (type will change from Manuscript to Proceedings) once the publication is accepted for publishing.

Available from: 2019-02-18 Created: 2019-02-18 Last updated: 2019-06-14Bibliographically approved
In thesis
1. Towards Usable Transparency via Individualisation
Open this publication in new window or tab >>Towards Usable Transparency via Individualisation
2019 (English)Licentiate thesis, comprehensive summary (Other academic)
Abstract [en]

The General Data Protection Regulation grants data subjects the legal rights of transparency and intervenability. Ex post transparency provides users of data services with insight into how their personal data have been processed, and potentially clarifies what consequences will or may arise due to the processing of their data. Technological artefacts, ex post transparency-enhancing tools (TETs) convey such information to data subjects, provided the TETs are designed to suit the predisposition of their audience. Despite being a prerequisite for transparency, however, many of the TETs available to date lack usability in that their capabilities do not reflect the needs of their final users.

The objective of this thesis is therefore to systematically apply the concept of human-centred design to ascertain design principles that demonstrably lead to the implementation of a TET that facilitates ex post transparency and supports intervenability. To this end, we classify the state of the art of usable ex post TETs published in the literature and discuss the gaps therein. Contextualising our findings in the domain of fitness tracking, we investigate to what extent individualisation can help accommodate the needs of users of online mobile health services. We introduce the notion of privacy notifications as a means to inform data subjects about incidences worthy of their attention and examine how far privacy personas reflect the preferences of distinctive groups of recipients. We suggest a catalogue of design guidelines that can serve as a basis for specifying context-sensitive requirements for the implementation of a TET that leverages privacy notifications to facilitate ex post transparency, and which also serve as criteria for the evaluation of a future prototype.

Place, publisher, year, edition, pages
Karlstad: Karlstads universitet, 2019. p. 140
Series
Karlstad University Studies, ISSN 1403-8099 ; 2019:8
Keywords
Data transparency, General Data Protection Regulation (GDPR), Human-centred design, Human-computer interaction (HCI), Information privacy, Intervenability, Mobile health (mhealth), Transparency-enhancing tool (TET), Usability
National Category
Human Computer Interaction Interaction Technologies Media and Communication Technology
Research subject
Computer Science
Identifiers
urn:nbn:se:kau:diva-71120 (URN)978-91-7867-003-1 (ISBN)978-91-7867-008-6 (ISBN)
Presentation
2019-05-23, 1B309, Karlstad university, Karlstad, 10:00 (English)
Opponent
Supervisors
Funder
EU, Horizon 2020, 675730
Note

Paper 2 ingick som manuskript i avhandlingen, nu publicerad.

Available from: 2019-05-02 Created: 2019-02-28 Last updated: 2019-09-18Bibliographically approved

Open Access in DiVA

No full text in DiVA

By organisation
Department of Mathematics and Computer Science (from 2013)
Human Computer InteractionOther Computer and Information Science

Search outside of DiVA

GoogleGoogle Scholar

urn-nbn

Altmetric score

urn-nbn
Total: 156 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf