{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,30]],"date-time":"2026-09-30T16:56:44Z","timestamp":1790787404589,"version":"4.1.0"},"publisher-location":"New York, New York, USA","reference-count":43,"publisher":"ACM Press","license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"EPSRC","award":["EP\/J017728\/1"],"award-info":[{"award-number":["EP\/J017728\/1"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016]]},"DOI":"10.1145\/2872518.2890590","type":"proceedings-article","created":{"date-parts":[[2017,1,23]],"date-time":"2017-01-23T20:35:52Z","timestamp":1485203752000},"page":"799-806","source":"Crossref","is-referenced-by-count":16,"title":["Privacy Languages"],"prefix":"10.1145","author":[{"given":"Jun","family":"Zhao","sequence":"first","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Reuben","family":"Binns","sequence":"additional","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Max","family":"Van Kleek","sequence":"additional","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nigel","family":"Shadbolt","sequence":"additional","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","reference":[{"key":"key-10.1145\/2872518.2890590-1","unstructured":"Tracking protection working group charter. Technical report, Access on 16 January 2016."},{"key":"key-10.1145\/2872518.2890590-2","doi-asserted-by":"crossref","unstructured":"R. Agrawal, J. Kiernan, R. Srikant, and Y. Xu. Hippocratic databases. In Proceedings of the 28th international conference on Very Large Data Bases, pages 143--154. VLDB Endowment, 2002.","DOI":"10.1016\/B978-155860869-6\/50021-4"},{"key":"key-10.1145\/2872518.2890590-3","doi-asserted-by":"crossref","unstructured":"R. Agrawal, J. Kiernan, R. Srikant, and Y. Xu. An xpath-based preference language for p3p. In Proceedings of the 12th international conference on World Wide Web, pages 629--639. ACM, 2003.","DOI":"10.1145\/775152.775241"},{"key":"key-10.1145\/2872518.2890590-4","unstructured":"J. Angwin. Online tracking ramps up -- popularity of user-tailored advertising fuels data gathering on browsing habits. Wall Street Journal, 2012."},{"key":"key-10.1145\/2872518.2890590-5","doi-asserted-by":"crossref","unstructured":"C. A. Ardagna, M. Cremonini, S. De Capitani di Vimercati, and P. Samarati. A privacy-aware access control system. Journal of Computer Security, 16(4):369--397, 2008.","DOI":"10.3233\/JCS-2008-0328"},{"key":"key-10.1145\/2872518.2890590-6","unstructured":"P. Ashley, S. Hada, G. Karjoth, C. Powers, and M. Schunter. Enterprise privacy authorization language (epal 1.2). Submission to W3C, 2003. Accessed December 2015."},{"key":"key-10.1145\/2872518.2890590-7","doi-asserted-by":"crossref","unstructured":"P. Ashley, S. Hada, G. Karjoth, and M. Schunter. E-p3p privacy policies and privacy authorization. In Proceedings of the 2002 ACM workshop on Privacy in the Electronic Society, pages 103--109. ACM, 2002.","DOI":"10.1145\/644527.644538"},{"key":"key-10.1145\/2872518.2890590-8","doi-asserted-by":"crossref","unstructured":"M. Azraoui, K. Elkhiyaoui, M. Onen, K. Bernsmed, A. S. De Oliveira, and J. Sendor. A-ppl: An accountability policy language. In Data Privacy Management, Autonomous Spontaneous Security, and Security Assurance, pages 319--326. Springer, 2015.","DOI":"10.1007\/978-3-319-17016-9_21"},{"key":"key-10.1145\/2872518.2890590-9","doi-asserted-by":"crossref","unstructured":"A. Barth, J. C. Mitchell, and J. Rosenstein. Conflict and combination in privacy policy languages. In Proceedings of the 2004 ACM workshop on Privacy in the electronic society, pages 45--46. ACM, 2004.","DOI":"10.1145\/1029179.1029195"},{"key":"key-10.1145\/2872518.2890590-10","doi-asserted-by":"crossref","unstructured":"P. Beatty, I. Reay, S. Dick, and J. Miller. P3p adoption on e-commerce web sites: a survey and analysis. Internet Computing, IEEE, 11(2):65--71, 2007.","DOI":"10.1109\/MIC.2007.45"},{"key":"key-10.1145\/2872518.2890590-11","doi-asserted-by":"crossref","unstructured":"M. Y. Becker, C. Fournet, and A. D. Gordon. Design and semantics of a decentralized authorization language. In 20th IEEE Computer Security Foundations Symposium (CSF), pages 3--15, 2007.","DOI":"10.1109\/CSF.2007.18"},{"key":"key-10.1145\/2872518.2890590-12","unstructured":"M. Y. Becker, A. Malkis, and L. Bussard. A framework for privacy preferences and data-handling policies. Technical report, Microsoft Research Cambridge Technical Report, MSR-TR-2009-128, 2009."},{"key":"key-10.1145\/2872518.2890590-13","unstructured":"F. Belanger and R. E. Crossler. Privacy in the digital age: a review of information privacy research in information systems. MIS quarterly, 35(4):1017--1042, 2011."},{"key":"key-10.1145\/2872518.2890590-14","unstructured":"K. Bohrer and B. Holland. Customer profile exchange (cpexchange) specification. 2000. Accessed December 2015."},{"key":"key-10.1145\/2872518.2890590-15","doi-asserted-by":"crossref","unstructured":"M. Borghi, F. Ferretti, and S. Karapapa. Online data processing consent under eu law: a theoretical framework and empirical evidence from the uk. International Journal of Law and Information Technology, 21(2):109--153, 2013.","DOI":"10.1093\/ijlit\/eat001"},{"key":"key-10.1145\/2872518.2890590-16","doi-asserted-by":"crossref","unstructured":"S. Byers, L. F. Cranor, D. Kormann, and P. McDaniel. Searching for privacy: Design and implementation of a p3p-enabled search engine. In Privacy Enhancing Technologies, pages 314--328. Springer, 2005.","DOI":"10.1007\/11423409_20"},{"key":"key-10.1145\/2872518.2890590-17","unstructured":"F. Chanchary and S. Chiasson. User perceptions of sharing, advertising, and tracking. In Proceedings of the Eleventh Symposium On Usable Privacy and Security (SOUPS 2015), pages 53--67, Ottawa, July 2015. USENIX Association"},{"key":"key-10.1145\/2872518.2890590-18","unstructured":"L. Cranor, M. Langheinrich, and M. Marchiori. A p3p preference exchange language 1.0 (appel 1.0): W3c working draft 15 april 2002. World Wide Web Consortium (W3C), URL: http:\/\/www. w3. org\/TR\/P3P-preferences, 2002. Accessed December 2015."},{"key":"key-10.1145\/2872518.2890590-19","unstructured":"L. Cranor, M. Langheinrich, M. Marchiori, M. Presler-Marshall, and J. Reagle. The platform for privacy preferences 1.0 (p3p1. 0) specification. W3C recommendation 16 April 2002, 2002. Accessed December 2015."},{"key":"key-10.1145\/2872518.2890590-20","unstructured":"L. F. Cranor. Necessary but not sufficient: Standardized mechanisms for privacy notice and choice. J. on Telecomm. &#38; High Tech. L., 10:273, 2012."},{"key":"key-10.1145\/2872518.2890590-21","doi-asserted-by":"crossref","unstructured":"L. F. Cranor, M. Arjula, and P. Guduru. Use of a p3p user agent by early adopters. In Proceedings of the 2002 ACM workshop on Privacy in the Electronic Society, pages 1--10. ACM, 2002.","DOI":"10.1145\/644527.644528"},{"key":"key-10.1145\/2872518.2890590-22","doi-asserted-by":"crossref","unstructured":"L. F. Cranor, P. Guduru, and M. Arjula. User interfaces for privacy agents. ACM Transactions on Computer-Human Interaction (TOCHI), 13(2):135--178, 2006.","DOI":"10.1145\/1165734.1165735"},{"key":"key-10.1145\/2872518.2890590-23","unstructured":"N. Doty, H. West, J. Brookman, S. Harvey, and E. Newland. Tracking compliance and scope w3c last call working draft 14 july 2015. Technical report. Accessed in January 2016."},{"key":"key-10.1145\/2872518.2890590-24","unstructured":"J. Gomez, T. Pinnick, and A. Soltani. Knowprivacy. Technical report, 2009."},{"key":"key-10.1145\/2872518.2890590-25","doi-asserted-by":"crossref","unstructured":"L.-E. Holtz, H. Zwingelberg, and M. Hansen. Privacy policy icons. In Privacy and Identity Management for Life, pages 279--285. Springer, 2011.","DOI":"10.1007\/978-3-642-20317-6_15"},{"key":"key-10.1145\/2872518.2890590-26","doi-asserted-by":"crossref","unstructured":"J. Iyilade and J. Vassileva. P2u: A privacy policy specification language for secondary data sharing and usage. In IEEE Security and Privacy Workshops (SPW), pages 18--22. IEEE, 2014.","DOI":"10.1109\/SPW.2014.12"},{"key":"key-10.1145\/2872518.2890590-27","doi-asserted-by":"crossref","unstructured":"L. Kagal, C. Hanson, and D. Weitzner. Using dependency tracking to provide explanations for policy management. In 9th IEEE International Workshop on Policies for Distributed Systems and Networks. POLICY 2008, pages 54--61. IEEE, 2008.","DOI":"10.1109\/POLICY.2008.51"},{"key":"key-10.1145\/2872518.2890590-28","unstructured":"S. Kasem-Madani and M. Meier. Security and privacy policy languages: A survey, categorization and gap identification. arXiv preprint arXiv:1512.00201, 2015."},{"key":"key-10.1145\/2872518.2890590-29","unstructured":"J. Kolter. User-Centric Privacy -- A Usable and Provider-Independent Privacy Infrastructure (Chap 4). PhD thesis, University of Regensburg, 2009. https:\/\/www.ics.uci.edu\/ kobsa\/phds\/kolter.pdf."},{"key":"key-10.1145\/2872518.2890590-30","doi-asserted-by":"crossref","unstructured":"U. K&#246;nig. Primelife checkout. In Privacy and Identity Management for Life - PrimeLife International Summer School, Helsingborg, Sweden, August 2--6, 2010, pages 325--337. Springer, 2011.","DOI":"10.1007\/978-3-642-20769-3_26"},{"key":"key-10.1145\/2872518.2890590-31","unstructured":"P. Kumaraguru, L. Cranor, J. Lobo, and S. Calo. A survey of privacy policy languages. In Workshop on Usable IT Security Management (USM '07): Proceedings of the 3rd Symposium on Usable Privacy and Security. ACM, 2007."},{"key":"key-10.1145\/2872518.2890590-32","unstructured":"K. Lalana. Rei: A policy language for the me-centric project. TechReport, HP Labs, 2002. Accessed December 2015."},{"key":"key-10.1145\/2872518.2890590-33","doi-asserted-by":"crossref","unstructured":"P. G. Leon, L. F. Cranor, A. M. McDonald, and R. McGuire. Token attempt: the misrepresentation of website privacy policies through the misuse of p3p compact policy tokens. In Proceedings of the 9th annual ACM workshop on Privacy in the electronic society, pages 93--104. ACM, 2010.","DOI":"10.1145\/1866919.1866932"},{"key":"key-10.1145\/2872518.2890590-34","doi-asserted-by":"crossref","unstructured":"P. G. Leon, B. Ur, Y. Wang, M. Sleeper, R. Balebako, R. Shay, L. Bauer, M. Christodorescu, and L. F. Cranor. What matters to users': factors that affect users' willingness to share information with online advertisers. In Proceedings of the Ninth Symposium on Usable Privacy and Security (SOUPS 2013), page 7. ACM, 2013.","DOI":"10.1145\/2501604.2501611"},{"key":"key-10.1145\/2872518.2890590-35","unstructured":"A. Matheus and J. Herrmann. Geospatial extensible access control markup language (geoxacml). Open Geospatial Consortium Inc. OGC, 2008."},{"key":"key-10.1145\/2872518.2890590-36","doi-asserted-by":"crossref","unstructured":"J. R. Mayer and J. C. Mitchell. Third-party web tracking: Policy and technology. In Security and Privacy (SP), 2012 IEEE Symposium on, pages 413--427. IEEE, 2012.","DOI":"10.1109\/SP.2012.47"},{"key":"key-10.1145\/2872518.2890590-37","unstructured":"S. Preibusch. Managing diversity in privacy preferences: How to construct a privacy typology. In Workshop on Privacy Personas and Segmentation, co-located at the 10th Symposium On Usable Privacy and Security (SOUPS), 2014."},{"key":"key-10.1145\/2872518.2890590-38","unstructured":"E. Rissanen. extensible access control markup language (xacml) version 2.0. Oasis, 2013. Accessed December 2015."},{"key":"key-10.1145\/2872518.2890590-39","unstructured":"J. L. B. L. N. Sadeh and J. I. Hong. Modeling users' mobile app privacy preferences: Restoring usability in a sea of permission settings. In Symposium on Usable Privacy and Security (SOUPS), 2014. {40} S. Senecal and J. Nantel. The influence of online product recommendations on consumers' online choices. Journal of retailing, 80(2):159--169, 2004."},{"key":"key-10.1145\/2872518.2890590-40","unstructured":"O. Seneviratne and L. Kagal. Httpa: Accountable http. In IAB\/w3C Internet Privacy Workshop, 2010. {42} N. Shadbolt, M. Van Kleek, and R. Binns. The rise of social machines. Consumer Electronics Magazine, IEEE, 5(1), 2016."},{"key":"key-10.1145\/2872518.2890590-41","doi-asserted-by":"crossref","unstructured":"S. Trabelsi, J. Sendor, and S. Reinicke. Ppl: Primelife privacy policy engine. In IEEE International Symposium on Policies for Distributed Systems and Networks (POLICY), pages 184--185. IEEE, 2011.","DOI":"10.1109\/POLICY.2011.24"},{"key":"key-10.1145\/2872518.2890590-42","doi-asserted-by":"crossref","unstructured":"D. J. Weitzner, H. Abelson, T. Berners-Lee, J. Feigenbaum, J. Hendler, and G. J. Sussman. Information accountability. Communications of the ACM, 51(6):82--87, 2008.","DOI":"10.1145\/1349026.1349043"},{"key":"key-10.1145\/2872518.2890590-43","doi-asserted-by":"crossref","unstructured":"J. Yang, K. Yessenov, and A. Solar-Lezama. A language for automatically enforcing privacy policies. In ACM SIGPLAN Notices, volume 47, pages 85--96. ACM, 2012.","DOI":"10.1145\/2103656.2103669"}],"event":{"name":"the 25th International Conference Companion","location":"Montr&#233;al, Qu&#233;bec, Canada","acronym":"WWW '16 Companion","number":"25","sponsor":["SIGWEB, ACM Special Interest Group on Hypertext, Hypermedia, and Web","IW3C2, International World Wide Web Conference Committee"],"start":{"date-parts":[[2016,4,11]]},"end":{"date-parts":[[2016,4,15]]}},"container-title":["Proceedings of the 25th International Conference Companion on World Wide Web - WWW '16 Companion"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2872518.2890590","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/dl.acm.org\/ft_gateway.cfm?id=2890590&ftid=1707939&dwn=1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:54:22Z","timestamp":1750222462000},"score":1,"resource":{"primary":{"URL":"http:\/\/dl.acm.org\/citation.cfm?doid=2872518.2890590"}},"subtitle":["Are we there yet to enable user controls?"],"proceedings-subject":"World Wide Web","short-title":[],"issued":{"date-parts":[[2016]]},"references-count":43,"URL":"https:\/\/doi.org\/10.1145\/2872518.2890590","relation":{},"subject":[],"published":{"date-parts":[[2016]]}}}