skip to main content
US FlagAn official website of the United States government
dot gov icon
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
https lock icon
Secure .gov websites use HTTPS
A lock ( lock ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Explore Research Products in the PAR
It may take a few hours for recently added research products to appear in PAR search results.


Title: Pursuing Usable and Useful Data Downloads Under GDPR/CCPA Access Rights via Co-Design
Data privacy regulations like GDPR and CCPA define a right of access empowering consumers to view the data companies store about them. Companies satisfy these requirements in part via data downloads, or downloadable archives containing this information. Data downloads vary in format, organization, comprehensiveness, and content. It is unknown, however, whether current data downloads actually achieve the transparency goals embodied by the right of access. In this paper, we report on the first exploration of the design of data downloads. Through 12 focus groups involving 42 participants, we gathered reactions to six companies’ data downloads. Using co-design techniques, we solicited ideas for future data download designs, formats, and tools. Most participants indicated that current offerings need improvement to be useful, emphasizing the need for better filtration, visualization, and summarization to help them hone in on key information.  more » « less
Award ID(s):
2047827
PAR ID:
10319424
Author(s) / Creator(s):
; ; ; ; ; ;
Date Published:
Journal Name:
Proceedings of the USENIX Symposium on Usable Privacy and Security (SOUPS) 2021
Format(s):
Medium: X
Sponsoring Org:
National Science Foundation
More Like this
  1. ; (, Proceedings of the ACM on Human-Computer Interaction)
    This project illuminates what data youth believe online advertisers and social media companies collect about them. We situate these findings within the context of current advertising regulations and compare youth beliefs with what data social media companies report collecting based on their privacy policies. Through interviews with 21 youth ages 10-17 in the United States, we learn that participants are largely aware of how their interactions on the website or app are used to inform personalized content. However, certain types of information like geolocation or how long data is retained is less clear to them. We also learn about what school and family factors influence youth to adopt apps and websites. This work has implications for design and policy related to companies' personal data collection and targeted advertising, especially for youth. 
    more » « less
  2. ; ; ; ; ; ; (, Proceedings of the 33rd USENIX Security Symposium)
    Recent privacy laws have strengthened data subjects’ right to access personal data collected by companies. Prior work has found that data exports companies provide consumers in response to Data Subject Access Requests (DSARs) can be overwhelming and hard to understand. To identify directions for improving the user experience of data exports, we conducted an online study in which 33 participants explored their own data from Amazon, Facebook, Google, Spotify, or Uber. Participants articulated questions they hoped to answer using the exports. They also annotated parts of the data they found confusing, creepy, interesting, or surprising. While participants hoped to learn either about their own usage of the platform or how the company collects and uses their personal data, these questions were often left unanswered. Participants’ annotations documented their excitement at finding data records that triggered nostalgia, but also shock about the privacy implications of other data they saw. Having examined their data, many participants hoped to request the company erase some, but not all, of the data. We discuss opportunities for future transparency-enhancing tools and enhanced laws. 
    more » « less
  3. ; ; ; ; ; ; (, USENIX Security Symposium)
    Recent privacy laws have strengthened data subjects' right to access personal data collected by companies. Prior work has found that data exports companies provide consumers in response to Data Subject Access Requests (DSARs) can be overwhelming and hard to understand. To identify directions for improving the user experience of data exports, we conducted an online study in which 33 participants explored their own data from Amazon, Facebook, Google, Spotify, or Uber. Participants articulated questions they hoped to answer using the exports. They also annotated parts of the export they found confusing, creepy, interesting, or surprising. While participants hoped to learn either about their own usage of the platform or how the company collects and uses their personal data, these questions were often left unanswered. Participants' annotations documented their excitement at finding data records that triggered nostalgia, but also shock and anger about the privacy implications of other data they saw. Having examining their data, many participants hoped to request the company erase some, but not all, of the data. We discuss opportunities for future transparency-enhancing tools and enhanced laws. 
    more » « less
  4. ; ; ; ; ; ; (, ACM Transactions on Accessible Computing)
    People who are blind share their images and videos with companies that provide visual assistance technologies (VATs) to gain access to information about their surroundings. A challenge is that people who are blind cannot independently validate the content of the images and videos before they share them, and their visual data commonly contains private content. We examine privacy concerns for blind people who share personal visual data with VAT companies that provide descriptions authored by humans or artifcial intelligence (AI) . We frst interviewed 18 people who are blind about their perceptions of privacy when using both types of VATs. Then we asked the participants to rate 21 types of image content according to their level of privacy concern if the information was shared knowingly versus unknowingly with human- or AI-powered VATs. Finally, we analyzed what information VAT companies communicate to users about their collection and processing of users’ personal visual data through their privacy policies. Our fndings have implications for the development of VATs that safeguard blind users’ visual privacy, and our methods may be useful for other camera-based technology companies and their users. 
    more » « less
  5. ; ; ; ; ; ; (, ASEE Conferences)
    The construction industry has been a predominantly White/Caucasian Men community with a very low representation of women and people from traditionally marginalized backgrounds. Even though companies have been implementing Diversity, Equity, and Inclusion (DEI) statements for many years, we still believe it is neither a diverse nor equitable field. To better understand how DEI statements declared by companies have been understood and recognized by employees, a survey was deployed nationwide to understand how professionals in the construction industry perceive their organization's DEI statements or policies. A complete data set was built from 249 participants. 75% identified themselves as men and 25% as women, and nobody identified with other gender identities. More than 80% of participants were White/Caucasian, 4% Black or African American, 4% Hispanic or Latinx, and 6% Asian. Participants are currently working in small (24%), medium (30%), and large (46%) construction and design companies located across The United States. Regarding the number of employees, companies are small, less than 99 employees; medium, between 100 and 499 employees; and large, more than 500 employees. Also, companies were grouped into four main types, building construction companies (67%), transportation construction companies (6%), special trade contractor companies (17%), and design companies (10%). For more than 65% of professionals in the construction industry who participated in this study, DEI was mainly related to proper representation of women and minoritized populations in the workforce; Merit-based transparent recruitment and promotion; equality, social justice, and nondiscrimination policy statement; and equitable payment and compensation. Other factors such as proper representation of women and minoritized populations at the top management level and payment structure transparency did not emerge from the results. We also found that 70% of professionals identified DEI statements in their companies and 30% of professionals did not identify or did not know about DEI statements. Looking at the company size, 85% of professionals in large companies identified DEI statements in their companies, but 71% and 42% of professionals in medium and small companies identified DEI statements in their companies, respectively. According to the company type, more than 80% of professionals working in design companies recognized DEI statements in their companies, but around 60% in construction and special trade companies. We can highlight that large companies have established policies and practices that result in better socialization and recognition of their DEI statements than medium and small companies. Also, construction and special trade companies need to strengthen their DEI statements and increase the representation of women and people from traditionally marginalized backgrounds. Results from this research give an idea about the current state of DEI in the construction industry and would contribute to the current effort to increase the diversity of the nation's construction workforce. 
    more » « less
  • Citation Formats
  • MLA
  • APA
  • Chicago
  • BibTeX
  • Save / Share this Record
  • Send to Email