Are Privacy Dashboards Good for End Users? Evaluating User Perceptions and Reactions to Google's My Activity (Extended Version)

Privacy dashboards and transparency tools help users review and manage the data collected about them online. Since 2016, Google has offered such a tool, My Activity, which allows users to review and delete their activity data from Google services. We conducted an online survey with n = 153 participants to understand if Google’s My Activity, as an example of a privacy transparency tool, increases or decreases endusers’ concerns and benefits regarding data collection. While most participants were aware of Google’s data collection, the volume and detail was surprising, but after exposure to My Activity, participants were significantly more likely to be both less concerned about data collection and to view data collection more beneficially. Only 25 % indicated that they would change any settings in the My Activity service or change any behaviors. This suggests that privacy transparency tools are quite beneficial for online services as they garner trust with their users and improve their perceptions without necessarily changing users’ behaviors. At the same time, though, it remains unclear if such transparency tools actually improve end user privacy by sufficiently assisting or motivating users to change or review data collection settings.

[1]  Tobias Pulls,et al.  Transparency, Privacy and Trust - Technology for Tracking and Controlling My Data Disclosures: Does This Work? , 2016, IFIPTM.

[2]  Elissa M. Redmiles,et al.  How Well Do My Results Generalize? Comparing Security and Privacy Survey Results from MTurk, Web, and Telephone Samples , 2019, 2019 IEEE Symposium on Security and Privacy (SP).

[3]  Martin Degeling,et al.  (Un)informed Consent: Studying GDPR Consent Notices in the Field , 2019, CCS.

[4]  Yang Wang,et al.  What matters to users?: factors that affect users' willingness to share information with online advertisers , 2013, SOUPS.

[5]  Vittorio Scarano,et al.  How Increased Awareness Can Impact Attitudes and Behaviors toward Online Privacy Protection , 2013, 2013 International Conference on Social Computing.

[6]  Lorrie Faith Cranor,et al.  A Design Space for Effective Privacy Notices , 2015, SOUPS.

[7]  Axel Küpper,et al.  Designing a GDPR-Compliant and Usable Privacy Dashboard , 2017, Privacy and Identity Management.

[8]  Cristiana Santos,et al.  Do Cookie Banners Respect my Choice? : Measuring Legal Compliance of Banners from IAB Europe’s Transparency and Consent Framework , 2020, 2020 IEEE Symposium on Security and Privacy (SP).

[9]  Eelco Herder,et al.  Privacy Dashboards: The Impact of the Type of Personal Data and User Control on Trust and Perceived Risk , 2020, UMAP.

[10]  Romain Rouvoy,et al.  Fp-Scanner: The Privacy Implications of Browser Fingerprint Inconsistencies , 2018, USENIX Security Symposium.

[11]  Blase Ur,et al.  Oh, the Places You've Been! User Reactions to Longitudinal Transparency About Third-Party Web Tracking and Inferencing , 2019, CCS.

[12]  Blase Ur,et al.  Taking Data Out of Context to Hyper-Personalize Ads: Crowdworkers' Privacy Perceptions and Decisions to Disclose Private Information , 2020, CHI.

[13]  Blase Ur,et al.  Unpacking Perceptions of Data-Driven Inferences Underlying Online Targeting and Personalization , 2018, CHI.

[14]  Thijs Veugen,et al.  Transparency Enhancing Tools (TETs): An Overview , 2013, 2013 Third Workshop on Socio-Technical Aspects in Security and Trust.

[15]  Kovila P. L. Coopamootoo,et al.  Usage Patterns of Privacy-Enhancing Technologies , 2020, CCS.

[16]  Simone Fischer-Hübner,et al.  Tools for Achieving Usable Ex Post Transparency: A Survey , 2017, IEEE Access.

[17]  Lorrie Faith Cranor,et al.  An Empirical Analysis of Data Deletion and Opt-Out Choices on 150 Websites , 2019, SOUPS @ USENIX Security Symposium.

[18]  Alessandro Acquisti,et al.  Expecting the Unexpected: Understanding Mismatched Privacy Expectations Online , 2016, SOUPS.

[19]  Blase Ur,et al.  Watching Them Watching Me: Browser Extensions Impact on User Privacy Awareness and Concern , 2016 .

[20]  L. Cranor,et al.  Nudges for Privacy and Security , 2017, ACM Comput. Surv..

[21]  Yang Wang,et al.  Why Johnny can't opt out: a usability evaluation of tools to limit online behavioral advertising , 2012, CHI.

[22]  Herman T. Tavani,et al.  PHILOSOPHICAL THEORIES OF PRIVACY: IMPLICATIONS FOR AN ADEQUATE ONLINE PRIVACY POLICY , 2007 .

[23]  Emilee J. Rader,et al.  Awareness of Behavioral Tracking and Information Privacy Concern in Facebook and Google , 2014, SOUPS.

[24]  Nataliia Bielova Web Tracking Technologies and Protection Mechanisms , 2017, CCS.

[25]  Blase Ur,et al.  Your Secrets Are Safe: How Browsers' Explanations Impact Misconceptions About Private Browsing Mode , 2018, WWW.

[26]  Lorrie Faith Cranor,et al.  How Short Is Too Short? Implications of Length and Framing on the Effectiveness of Privacy Notices , 2016, SOUPS.

[27]  Hana Habib,et al.  "It's a scavenger hunt": Usability of Websites' Opt-Out and Data Deletion Choices , 2020, CHI.

[28]  Yang Wang,et al.  Smart, useful, scary, creepy: perceptions of online behavioral advertising , 2012, SOUPS.

[29]  Lorrie Faith Cranor,et al.  A "nutrition label" for privacy , 2009, SOUPS.

[30]  Garrett A. Johnson,et al.  Consumer Privacy Choice in Online Advertising: Who Opts Out and at What Cost to Industry? , 2020, Mark. Sci..

[31]  Blase Ur,et al.  What Twitter Knows: Characterizing Ad Targeting Practices, User Perceptions, and Ad Explanations Through Users' Own Twitter Data , 2020, USENIX Security Symposium.

[32]  Jaeyoung Choi,et al.  The Accuracy of the Demographic Inferences Shown on Google's Ad Settings , 2018, WPES@CCS.

[33]  Nikhil Sharma,et al.  Trust, transparency & control in inferred user interest models , 2014, CHI Extended Abstracts.

[34]  Thorsten Holz,et al.  We Value Your Privacy ... Now Take Some Cookies: Measuring the GDPR's Impact on Web Privacy , 2019, NDSS.

[35]  Christian Zimmermann,et al.  Privacy Dashboards: Reconciling Data-Driven Business Models and Privacy , 2014, 2014 Ninth International Conference on Availability, Reliability and Security.

[36]  Erik Wästlund,et al.  Usable Transparency with the Data Track: A Tool for Visualizing Data Disclosures , 2015, CHI Extended Abstracts.

[37]  Naresh K. Malhotra,et al.  Internet Users' Information Privacy Concerns (IUIPC): The Construct, the Scale, and a Causal Model , 2004, Inf. Syst. Res..

[38]  Midas Nouwens,et al.  Dark Patterns after the GDPR: Scraping Consent Pop-ups and Demonstrating their Influence , 2020, CHI.

[39]  University of California,et al.  Fingerprinting the Fingerprinters: Learning to Detect Browser Fingerprinting Behaviors , 2020, 2021 IEEE Symposium on Security and Privacy (SP).

[40]  Sonia Chiasson,et al.  User Perceptions of Sharing, Advertising, and Tracking , 2015, SOUPS.

[41]  Jessica Staddon,et al.  "I had no idea this was a thing": on the importance of understanding the user experience of personalized transparency tools , 2016, STAST.

[42]  Emilee Rader,et al.  "I Have a Narrow Thought Process": Constraints on Explanations Connecting Inferences and Self-Perceptions , 2020, SOUPS @ USENIX Security Symposium.

[43]  Norman M. Sadeh,et al.  What do they know about me? Contents and Concerns of Online Behavioral Profiles , 2015, ArXiv.