A thorough understanding of usable privacy research challenges is essential for ensuring high-quality research, improving methods and avoiding repeating mistakes, identifying research gap fillers, and advancing the field. In this chapter, we will examine some of the challenges associated with conducting usable privacy studies, such as the challenges of encompassing a variety of users, conflicting privacy and usability goals, privacy as a secondary objective, the privacy paradox, and issues related to measuring the right thing, the difficulty of conducting ecologically valid studies, and ethical and legal issues such as ethics of nudge and deception when conducting this type of research. We will further discuss the Human-Computer Interaction (HCI) challenges related to privacy technologies including the challenge of educating users on how privacy-enhancing technologies work and how to make online privacy transparent considering the effects of different factors such as information level, time, and medium through which we communicate to users that all play an important role in determining the effectiveness of transparency in protecting users' privacy. This chapter concludes by discussing some specific HCI challenges associated with privacy laws, such as discrepancies between what privacy laws require and what users need and problems regarding notice and choice.
This book explores usable privacy research, practices, challenges, and solutions for developers and practitioners in HCI, information systems, and the law
This chapter provides an overview of solutions for achieving usable privacy. First, the need for combining human-centred and privacy by design approaches is highlighted. Moreover, it is discussed how important challenges for usable privacy can be approached by available solutions. These include example approaches for considering culturally dependent privacy personas, developing usable Privacy-Enhancing Technology (PET) configuration tools through interdisciplinary efforts, raising users' attention to privacy as a secondary goal via engaging them with the policy content, designing usable multi-layered privacy notices and usable privacy management via semi-automation, and achieving usable transparency through usable explanations of PETs and different forms of visualisation of data disclosures. Finally, we discuss how fundamental legal privacy requirements map to Human-Computer Interaction (HCI) requirements and HCI solutions, focusing on the solutions discussed in this chapter.
A wide variety of literature exists on privacy across different communities and disciplines, including Human-Computer Interaction (HCI). Privacy literature is also scattered within HCI, considering that HCI has evolved from its origins to include a variety of disciplines. Therefore, this section is not intended to provide an exhaustive list of HCI privacy literature references. We explored the literature on usable privacy with a focus on the interaction and usability pillars of HCI, using the definition of usable privacy. Our search was narrowed to publications in reputed and high-quality journals and venues within and related to the privacy and security research field to categorise major themes and trends. Various themes are discussed in this section, including usable privacy research in the Internet of Things (IoT), inclusive privacy, usable privacy for developers, usable privacy for Privacy-Enhancing Technologies (PETs), visual privacy, and efforts to help people make better privacy decisions with usable privacy notices and choices. For each theme, we discuss pertinent literature and complete our discussion with existing problems, gaps, and future directions.
