Toward an Approach to Privacy Notices in IoT
Published: 09/2017
Abstract:
Abstract:
Companies are obliged to have privacy policies in place to notify the users about their privacy practices. However, privacy policies are not generally efficient and they fail to help users make informed decisions. The privacy policy challenges get worse when dealing with Internet of Things (IoT) as these devices have access to very sensitive data about users. Much research have addressed these problems using different approaches to make privacy policies more understandable. With the increase in the use of IoT, there is a large demand to improve privacy policies and provide better notices. In this paper, we propose a method to extract notice and choice statements from privacy policies for IoT users to decide about their privacy. We explain our approach by considering Google Home and Amazon Alexa as case studies. We show how our method creates notice and choices and evaluate our approach by conducting a survey among users. Our result shows that our proposed method is useful for the users to make decision and understand privacy notices.
Citation: P. Shayegh, S. Ghanavati, Toward an Approach to Privacy Notices in IoT, In proceeding of the 4th International Workshop on Evolving Security & Privacy Requirements Engineering (ESPRE’17),Lisbon, Portugal, September 2017.