{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,13]],"date-time":"2026-10-13T12:28:43Z","timestamp":1791894523650,"version":"4.3.4"},"reference-count":165,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2022,2,3]],"date-time":"2022-02-03T00:00:00Z","timestamp":1643846400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100003246","name":"Netherlands Organisation for Scientific Research","doi-asserted-by":"crossref","award":["628.001.011"],"award-info":[{"award-number":["628.001.011"]}],"id":[{"id":"10.13039\/501100003246","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100019926","name":"Netherlands Organisation for Applied Scientific Research","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100019926","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100007645","name":"Wetenschappelijk Onderzoek- en Documentatiecentrum","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100007645","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Centric B.V"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Comput. Surv."],"published-print":{"date-parts":[[2023,3,31]]},"abstract":"<jats:p>Privacy visualizations help users understand the privacy implications of using an online service. Privacy by Design guidelines provide generally accepted privacy standards for developers of online services. To obtain a comprehensive understanding of online privacy, we review established approaches, distill a unified list of 15 privacy attributes and rank them based on perceived importance by users and privacy experts. We then discuss similarities, explain notable differences, and examine trends in terms of the attributes covered. Finally, we show how our results provide a foundation for user-centric privacy visualizations, inspire best practices for developers, and give structure to privacy policies.<\/jats:p>","DOI":"10.1145\/3502288","type":"journal-article","created":{"date-parts":[[2022,2,3]],"date-time":"2022-02-03T05:02:04Z","timestamp":1643864524000},"page":"1-37","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":64,"title":["Understanding Online Privacy\u2014A Systematic Review of Privacy Visualizations and Privacy by Design Guidelines"],"prefix":"10.1145","volume":"55","author":[{"given":"Susanne","family":"Barth","sequence":"first","affiliation":[{"name":"University of Twente, Drienerlolaan, NB Enschede, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dan","family":"Ionita","sequence":"additional","affiliation":[{"name":"University of Twente, Drienerlolaan, NB Enschede, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Pieter","family":"Hartel","sequence":"additional","affiliation":[{"name":"University of Twente, Drienerlolaan, NB Enschede, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,2,3]]},"reference":[{"key":"e_1_3_3_2_2","volume-title":"ISO\/IEC 29100:2011 Information Technology \u2013 Security Techniques \u2013 Privacy Framework","author":"27 Technical Committee ISO\/IEC JTC 1\/SC","year":"2011","unstructured":"Technical Committee ISO\/IEC JTC 1\/SC 27. 2011. ISO\/IEC 29100:2011 Information Technology \u2013 Security Techniques \u2013 Privacy Framework. Standard ISO\/IEC 29100:2011(E). International Organization for Standardization and International Electrotechnical Commission, Geneva, Switzerland."},{"key":"e_1_3_3_3_2","doi-asserted-by":"publisher","DOI":"10.3390\/jsan8020022"},{"key":"e_1_3_3_4_2","doi-asserted-by":"publisher","DOI":"10.1145\/336992.336995"},{"key":"e_1_3_3_5_2","doi-asserted-by":"publisher","DOI":"10.1145\/3054926"},{"key":"e_1_3_3_6_2","doi-asserted-by":"publisher","DOI":"10.1257\/jel.54.2.442"},{"key":"e_1_3_3_7_2","doi-asserted-by":"publisher","DOI":"10.1145\/3297280.3297431"},{"key":"e_1_3_3_8_2","volume-title":"Generally Accepted Privacy Principles","year":"2009","unstructured":"AICPA and CICA. 2009. Generally Accepted Privacy Principles. Reports 0001069. The American Institute of Certified Public Accountants, Inc. and The Canadian Institute of Chartered Accountants, Toronto, Canada."},{"key":"e_1_3_3_9_2","doi-asserted-by":"publisher","DOI":"10.15849\/icit.2015.0066"},{"key":"e_1_3_3_10_2","first-page":"71","article-title":"Protecting one\u2019s own privacy in a big data economy","volume":"130","author":"Allen Anita L.","year":"2016","unstructured":"Anita L. Allen. 2016. Protecting one\u2019s own privacy in a big data economy. Harv. L. Rev. F. 130 (December 2016), 71\u201378.","journal-title":"Harv. L. Rev. F."},{"key":"e_1_3_3_11_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-67280-9_9"},{"key":"e_1_3_3_12_2","doi-asserted-by":"publisher","DOI":"10.5325\/jinfopoli.3.2013.0001"},{"key":"e_1_3_3_13_2","first-page":"985","volume-title":"Proceedings of the 29th Security Symposium (USENIX\u201920)","author":"Andow Benjamin","year":"2020","unstructured":"Benjamin Andow, Samin Yaseer Mahmud, Justin Whitaker, William Enck, Bradley Reaves, Kapil Singh, and Serge Egelman. 2020. Actions speak louder than words: Entity-sensitive privacy policy and data flow analysis with policheck. In Proceedings of the 29th Security Symposium (USENIX\u201920). USENIX Association, Berkeley, CA, 985\u20131002."},{"key":"e_1_3_3_14_2","unstructured":"Sheila F. Anthony. 2001. The Case for Standardization of Privacy Policy Formats. Retrieved June 1 2021 from https:\/\/www.ftc.gov\/public-statements\/2001\/07\/case-standardization-privacy-policy-formats."},{"key":"e_1_3_3_15_2","doi-asserted-by":"publisher","DOI":"10.1145\/1272516.1272522"},{"key":"e_1_3_3_16_2","doi-asserted-by":"publisher","DOI":"10.1109\/MSECP.2004.1281243"},{"key":"e_1_3_3_17_2","doi-asserted-by":"publisher","DOI":"10.5130\/acis2018.bb"},{"key":"e_1_3_3_18_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2012.01.006"},{"key":"e_1_3_3_19_2","volume-title":"Proceedings of the 20th Americas Conference on Information Systems (AMCIS\u201914)","author":"Bal G\u00f6khan","year":"2014","unstructured":"G\u00f6khan Bal. 2014. Designing privacy indicators for smartphone app markets: A new perspective on the nature of privacy risks of apps. In Proceedings of the 20th Americas Conference on Information Systems (AMCIS\u201914). Association for Information Systems."},{"key":"e_1_3_3_20_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-29238-6_2"},{"key":"e_1_3_3_21_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2010.01.010"},{"key":"e_1_3_3_22_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-2777-7_26"},{"key":"e_1_3_3_23_2","doi-asserted-by":"publisher","DOI":"10.1007\/s12553-017-0185-3"},{"key":"e_1_3_3_24_2","doi-asserted-by":"publisher","DOI":"10.1080\/01972240490507956"},{"key":"e_1_3_3_25_2","doi-asserted-by":"publisher","DOI":"10.1109\/PerComW.2013.6529497"},{"key":"e_1_3_3_26_2","doi-asserted-by":"publisher","DOI":"10.1145\/1542207.1542220"},{"key":"e_1_3_3_27_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-54069-1_5"},{"key":"e_1_3_3_28_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-21752-5_11"},{"key":"e_1_3_3_29_2","doi-asserted-by":"publisher","DOI":"10.1080\/13600869.2013.801580"},{"key":"e_1_3_3_30_2","unstructured":"The Privacy Company B.V. 2020. Privacy by Design Framework. (January 2020). Retrieved August 10 2020 from https:\/\/uploads-ssl.webflow.com\/5d5d0a009052fec16249aaab\/5dc3e8a351595bfff2a94fda_Privacy%20by%20Design%20framework%20V3.pdf."},{"key":"e_1_3_3_31_2","volume-title":"Privacy by Design: Setting a New Standard for Privacy Certification","author":"Casey Rose L.","year":"2016","unstructured":"Rose L. Casey. 2016. Privacy by Design: Setting a New Standard for Privacy Certification. Reports 15-2971-H. Deloitte LLP, Ontario, Canada."},{"key":"e_1_3_3_32_2","volume-title":"Privacy in the Information Age","author":"Cate Fred H.","year":"1997","unstructured":"Fred H. Cate. 1997. Privacy in the Information Age. Brookings Institution Press, Washington, DC."},{"key":"e_1_3_3_33_2","volume-title":"Creation of a Global Privacy Standard","author":"Cavoukian Ann","year":"2006","unstructured":"Ann Cavoukian. 2006. Creation of a Global Privacy Standard. Report. Information and Privacy Commissioner of Ontario, Ontario, Canada."},{"key":"e_1_3_3_34_2","volume-title":"Privacy by Design: The 7 Foundational Principles","author":"Cavoukian Ann","year":"2009","unstructured":"Ann Cavoukian. 2009. Privacy by Design: The 7 Foundational Principles. Report. Information and Privacy Commissioner of Ontario, Ontario, Canada."},{"key":"e_1_3_3_35_2","volume-title":"Privacy by Design: The 7 Foundational Principles: Implementation and Mapping of Fair Information Practices","author":"Cavoukian Ann","year":"2010","unstructured":"Ann Cavoukian. 2010. Privacy by Design: The 7 Foundational Principles: Implementation and Mapping of Fair Information Practices. Report. Information and Privacy Commissioner of Ontario, Ontario, Canada."},{"key":"e_1_3_3_36_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-8348-9788-6_25"},{"key":"e_1_3_3_37_2","doi-asserted-by":"publisher","DOI":"10.1109\/MTS.2012.2225459"},{"key":"e_1_3_3_38_2","doi-asserted-by":"publisher","DOI":"10.1109\/MCE.2019.2953739"},{"key":"e_1_3_3_39_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-33798-2_4"},{"key":"e_1_3_3_40_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00054"},{"key":"e_1_3_3_41_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.chb.2017.12.001"},{"key":"e_1_3_3_42_2","doi-asserted-by":"publisher","DOI":"10.1145\/3282308.3282325"},{"key":"e_1_3_3_43_2","doi-asserted-by":"publisher","DOI":"10.1145\/3167132.3167257"},{"key":"e_1_3_3_44_2","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2016.23"},{"issue":"2","key":"e_1_3_3_45_2","first-page":"27","article-title":"Prism and the european union\u2019s data protection directive","volume":"30","author":"Colonna Liane","year":"2013","unstructured":"Liane Colonna. 2013. Prism and the european union\u2019s data protection directive. J. Marsh. J. Info. Tech. Priv. L. 30, 2, Article 1 (2013), 27 pages.","journal-title":"J. Marsh. J. Info. Tech. Priv. L."},{"key":"e_1_3_3_46_2","volume-title":"APEC Privacy Framework","author":"Cooperation Asia-Pacific Economic","year":"2005","unstructured":"Asia-Pacific Economic Cooperation. 2005. APEC Privacy Framework. Reports APEC#205-SO-01.2. Asia Pacific Economic Cooperation Secretariat, Singapore."},{"key":"e_1_3_3_47_2","unstructured":"Lorrie Cranor. 2009. Find Web Sites That Respect Your Privacy. Retrieved December 10 2019 from http:\/\/www.privacybird.org."},{"key":"e_1_3_3_48_2","unstructured":"Digital Advertising Alliance. 2016. Put the Your AdChoices Icon to Work for You. Retrieved December 10 2019 from http:\/\/youradchoices.com\/learn."},{"key":"e_1_3_3_49_2","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2013.34"},{"key":"e_1_3_3_50_2","doi-asserted-by":"publisher","DOI":"10.1145\/3328020.3353951"},{"key":"e_1_3_3_51_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4302-6356-2"},{"key":"e_1_3_3_52_2","volume-title":"Privacy Management Reference Model and Methodology (PMRM) Version 1.0","author":"Drgon Michele","year":"2016","unstructured":"Michele Drgon, Gail Magnuson, and John Sabo. 2016. Privacy Management Reference Model and Methodology (PMRM) Version 1.0. Standards Track Work Product PMRM-v1.0-cs02. OASIS Committee Specification 02. OASIS Open 2016, Burlington, MA."},{"key":"e_1_3_3_53_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-41763-9_9"},{"key":"e_1_3_3_54_2","doi-asserted-by":"publisher","DOI":"10.1145\/1593254.1593286"},{"key":"e_1_3_3_55_2","doi-asserted-by":"publisher","DOI":"10.1093\/cybsec\/tyw003"},{"key":"e_1_3_3_56_2","doi-asserted-by":"publisher","DOI":"10.5281\/zenodo.12506"},{"key":"e_1_3_3_57_2","doi-asserted-by":"publisher","DOI":"10.1145\/2702123.2702251"},{"key":"e_1_3_3_58_2","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300764"},{"key":"e_1_3_3_59_2","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE5003.2020.00032"},{"key":"e_1_3_3_60_2","doi-asserted-by":"publisher","DOI":"10.1177\/1461444807080336"},{"key":"e_1_3_3_61_2","unstructured":"Simone Fischer-H\u00fcbner and Harald Zwingelberg. 2010. UI Prototypes: Policy Administration and Presentation Version 2. PrimeLife Project Deliverable D.4.3.2. (2010). Retrieved June 1 2021 from http:\/\/primelife.ercim.eu\/."},{"key":"e_1_3_3_62_2","volume-title":"Secure by Design: Improving the Cyber Security of Consumer Internet of Things Report","year":"2018","unstructured":"\u2020Department for Digital Culture Media & Sport. 2018. Secure by Design: Improving the Cyber Security of Consumer Internet of Things Report. Policy Paper. UK Government, London, UK."},{"key":"e_1_3_3_63_2","volume-title":"Proceedings of the 24th Americas Conference on Information Systems (AMCIS\u201918)","author":"Fox Grace","year":"2018","unstructured":"Grace Fox, Colin Tonge, Theo Lynn, and John Mooney. 2018. Communicating compliance: Developing a GDPR privacy label. In Proceedings of the 24th Americas Conference on Information Systems (AMCIS\u201918). Association for Information Systems."},{"key":"e_1_3_3_64_2","article-title":"Privacy Label","author":"Franke Gert","year":"2019","unstructured":"Gert Franke, Thomas Clever, Wouter van Dijk, Jeremy Raider, and Roel de Jonge. 2019. Privacy Label. Blog series. (November 2019). Retrieved December 10, 2019 from https:\/\/medium.com\/sensor-lab\/the-privacy-illusion-994ed98ec3ab.","journal-title":"Blog series"},{"key":"e_1_3_3_65_2","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.2415020"},{"key":"e_1_3_3_66_2","doi-asserted-by":"publisher","DOI":"10.1145\/1378063.1378159"},{"key":"e_1_3_3_67_2","unstructured":"Joshua Gomez Travis Pinnick and Ashkan Soltani. 2009. Privacy Coding Methodology. Retrieved December 10 2019 from http:\/\/knowprivacy.org\/policies_methodology.html."},{"key":"e_1_3_3_68_2","unstructured":"Canadian Standards Association (CSA Group). 2014. Model Code for the Protection of Personal Information of 23 December 2014 First Published in March 1996; Reaffirmed 2001. CAN\/CSA-Q830-96. (December 2014). Retrieved December 10 2019 from https:\/\/www.afn.ca\/uploads\/files\/nihbforum\/info_and_privacy_doc_-csa_model_code_for_the_protection_of_personal_information.pdf."},{"key":"e_1_3_3_69_2","doi-asserted-by":"publisher","DOI":"10.1001\/jama.291.7.856"},{"key":"e_1_3_3_70_2","series-title":"Lecture Notes in Informatics","first-page":"1703","volume-title":"Im Focus das Leben, Beitr\u00e4ge der 39. Jahrestagung der Gesellschaft f\u00fcr Informatik e.V. (INFORMATIK\u201909)","author":"Hansen Marit","year":"2009","unstructured":"Marit Hansen. 2009. Putting privacy pictograms into practice\u2014A European perspective. In Im Focus das Leben, Beitr\u00e4ge der 39. Jahrestagung der Gesellschaft f\u00fcr Informatik e.V. (INFORMATIK\u201909), Stefan Fischer, Erik Maehle, and R\u00fcdiger Reischuk (Eds.). Lecture Notes in Informatics, Vol. P-154. Gesellschaft f\u00fcr Informatik, Bonn, Germany, 1703\u20131716."},{"key":"e_1_3_3_71_2","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2008.41"},{"key":"e_1_3_3_72_2","doi-asserted-by":"publisher","DOI":"10.1145\/1268517.1268553"},{"key":"e_1_3_3_73_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-55415-5_38"},{"key":"e_1_3_3_74_2","doi-asserted-by":"publisher","DOI":"10.5817\/CP2016-4-7"},{"key":"e_1_3_3_75_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-20769-3_27"},{"key":"e_1_3_3_76_2","volume-title":"Proceedings of the 8th International Workshop for Technical, Economic and Legal Aspects of Business Models for Virtual Goods, Incorporating the 6th International Open Digital Rights Language Workshop (ODRL\u201909)","year":"2009","unstructured":"*Renato Iannella and Adam Finden. 2009. Privacy awareness: Icons and expression for social networks. In Proceedings of the 8th International Workshop for Technical, Economic and Legal Aspects of Business Models for Virtual Goods, Incorporating the 6th International Open Digital Rights Language Workshop (ODRL\u201909). Presses universitaires de Namur, Namur, Belgium, 13 pages."},{"key":"e_1_3_3_77_2","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0227800"},{"key":"e_1_3_3_78_2","doi-asserted-by":"publisher","DOI":"10.1145\/1572532.1572538"},{"key":"e_1_3_3_79_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-34638-5_6"},{"key":"e_1_3_3_80_2","first-page":"1","article-title":"When to research is to reveal: The growing threat to attorney and client confidentiality from online tracking","volume":"16","author":"Klinefelter Anne","year":"2011","unstructured":"Anne Klinefelter. 2011. When to research is to reveal: The growing threat to attorney and client confidentiality from online tracking. Va. J. L. Tech. 16, 1 (2011), 1.","journal-title":"Va. J. L. Tech."},{"key":"e_1_3_3_81_2","volume-title":"Urgent Upgrade: Protect Public Values in Our Digitized Society","author":"Kool Linda","year":"2017","unstructured":"Linda Kool, Jelte Timmer, Lamb\u00e8r M. M. Royakkers, and Q.C. (Rinie) van Est. 2017. Urgent Upgrade: Protect Public Values in Our Digitized Society. Report. Rathenau Instituut, The Hague, Netherlands."},{"key":"e_1_3_3_82_2","doi-asserted-by":"publisher","DOI":"10.17617\/2.3188061"},{"key":"e_1_3_3_83_2","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45427-6_23"},{"key":"e_1_3_3_84_2","doi-asserted-by":"publisher","DOI":"10.1145\/1060745.1060816"},{"key":"e_1_3_3_85_2","doi-asserted-by":"publisher","DOI":"10.1145\/3130941"},{"key":"e_1_3_3_86_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-22906-5_17"},{"key":"e_1_3_3_87_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.drugpo.2016.05.006"},{"key":"e_1_3_3_88_2","doi-asserted-by":"publisher","DOI":"10.1080\/01972243.2015.1107166"},{"key":"e_1_3_3_89_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10551-015-2565-9"},{"key":"e_1_3_3_90_2","doi-asserted-by":"publisher","DOI":"10.1080\/01972243.2016.1153012"},{"key":"e_1_3_3_91_2","doi-asserted-by":"publisher","DOI":"10.1109\/ESPRE.2014.6890523"},{"key":"e_1_3_3_92_2","series-title":"Proceedings of the 3rd International Workshop on Privacy Engineering co-located with 38th IEEE Symposium on Security and Privacy (S&P\u201917)","first-page":"41","volume":"1873","author":"Mart\u00edn Yod-Samuel","year":"2017","unstructured":"Yod-Samuel Mart\u00edn and Jos\u00e9 M. del \u00c1lamo. 2017. A metamodel for privacy engineering methods. In Proceedings of the 3rd International Workshop on Privacy Engineering co-located with 38th IEEE Symposium on Security and Privacy (S&P\u201917), Jos\u00e9 M. del \u00c1lamo, Seda F. G\u00fcrses, and Anupam Datta (Eds.). CEUR Workshop Proceedings, Vol. 1873. CEUR-WS Team, Aachen, Germany, 41\u201348."},{"key":"e_1_3_3_93_2","doi-asserted-by":"publisher","DOI":"10.1057\/s41263-016-0005-x"},{"key":"e_1_3_3_94_2","doi-asserted-by":"publisher","DOI":"10.1111\/j.1083-6101.2007.00328.x"},{"key":"e_1_3_3_95_2","doi-asserted-by":"publisher","DOI":"10.2307\/1287516"},{"key":"e_1_3_3_96_2","doi-asserted-by":"publisher","DOI":"10.19153\/cleiej.22.1.4"},{"key":"e_1_3_3_97_2","doi-asserted-by":"publisher","DOI":"10.1145\/3411497.3420216"},{"key":"e_1_3_3_98_2","doi-asserted-by":"publisher","DOI":"10.1177\/1541931213601249"},{"key":"e_1_3_3_99_2","doi-asserted-by":"publisher","DOI":"10.1126\/science.aaa4603"},{"issue":"1","key":"e_1_3_3_100_2","first-page":"119","article-title":"Privacy as contextual integrity","volume":"79","author":"Nissenbaum Helen","year":"2004","unstructured":"Helen Nissenbaum. 2004. Privacy as contextual integrity. Wash. L. Rev. 79, 1 (January 2004), 119\u2013158.","journal-title":"Wash. L. Rev."},{"key":"e_1_3_3_101_2","doi-asserted-by":"publisher","DOI":"10.1162\/DAED_a_00113"},{"key":"e_1_3_3_102_2","volume-title":"The OECD Privacy Framework","year":"2013","unstructured":"OECD. 2013. The OECD Privacy Framework. Booklet. Organisation for Economic Co-operation and Development, Paris, France."},{"key":"e_1_3_3_103_2","volume-title":"Australian Privacy Principles","author":"(OAIC) Office of the Australian Information Commissioner","year":"2014","unstructured":"Office of the Australian Information Commissioner (OAIC). 2014. Australian Privacy Principles. A Summary for APP entities from 12 March 2014. Australian Government, Sydney, Australia. Retrieved December 10, 2019 from https:\/\/www.oaic.gov.au\/assets\/privacy\/guidance-and-advice\/app-quick-reference-tool.pdf."},{"key":"e_1_3_3_104_2","volume-title":"Personal Information Protection and Electronic Documents Act (PIPEDA)","author":"(OAIC) Office of the Privacy Commissioner of Canada","year":"2000","unstructured":"Office of the Privacy Commissioner of Canada (OAIC). 2000. Personal Information Protection and Electronic Documents Act (PIPEDA). Act S.C. 200, c.5. Current to July 28, 2020, last amended on June 21, 2019. Minister of Justice, Ontario, Canada. Retrieved July 17, 2020 from https:\/\/laws-lois.justice.gc.ca\/eng\/acts\/P-8.6\/."},{"key":"e_1_3_3_105_2","doi-asserted-by":"publisher","DOI":"10.3233\/SW-170283"},{"key":"e_1_3_3_106_2","doi-asserted-by":"publisher","DOI":"10.1177\/1461444818799523"},{"key":"e_1_3_3_107_2","volume-title":"Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data, and Repealing Directive 95\/46\/EC (General Data Protection Regulation)","author":"Parliament The European","year":"2016","unstructured":"The European Parliament and the Council of European Union. 2016. Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data, and Repealing Directive 95\/46\/EC (General Data Protection Regulation). Legislation OJ L 119, 2.5. Publications Office of the European Union, Luxembourg, Luxembourg."},{"key":"e_1_3_3_108_2","doi-asserted-by":"publisher","DOI":"10.2307\/41409969"},{"key":"e_1_3_3_109_2","doi-asserted-by":"publisher","DOI":"10.1145\/2020408.2020596"},{"key":"e_1_3_3_110_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-19644-7_20"},{"key":"e_1_3_3_111_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2012.03.023"},{"key":"e_1_3_3_112_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2019.09.061"},{"key":"e_1_3_3_113_2","doi-asserted-by":"publisher","DOI":"10.1145\/2991561.2991566"},{"key":"e_1_3_3_114_2","doi-asserted-by":"publisher","DOI":"10.1509\/jppm.19.1.27.16941"},{"key":"e_1_3_3_115_2","series-title":"LNI","first-page":"93","volume-title":"Open Identity Summit 2016 der Gesellschaft f\u00fcr Infromatik e.v. (GI\u201916)","year":"2016","unstructured":"\u2020Denis Pinkas. 2016. An eID mechanism built along privacy by design principles using secure elements, pseudonyms and attributes. In Open Identity Summit 2016 der Gesellschaft f\u00fcr Infromatik e.v. (GI\u201916), Detlef H\u00fchnlein, Heiko Ro\u00dfnagel, Christian H. Schunck, and Maurizio Talamo (Eds.). LNI, Vol. P-264. Gesellschaft f\u00fcr Informatik e.V., Bonn, 93\u2013104."},{"key":"e_1_3_3_116_2","unstructured":"Travis Pinnick. 2011. Privacy Short Notice Design. Retrieved December 10 2019 from https:\/\/www.trustarc.com\/blog\/?p=1253."},{"key":"e_1_3_3_117_2","doi-asserted-by":"publisher","DOI":"10.1145\/3234695.3241003"},{"key":"e_1_3_3_118_2","doi-asserted-by":"publisher","DOI":"10.1109\/IE.2016.15"},{"key":"e_1_3_3_119_2","doi-asserted-by":"publisher","DOI":"10.1145\/2994459.2994466"},{"key":"e_1_3_3_120_2","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0027"},{"key":"e_1_3_3_121_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-02671-4_15"},{"key":"e_1_3_3_122_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2017.05.021"},{"key":"e_1_3_3_123_2","doi-asserted-by":"publisher","DOI":"10.1109\/CeDEM.2017.23"},{"key":"e_1_3_3_124_2","doi-asserted-by":"publisher","DOI":"10.3233\/FAIA317"},{"key":"e_1_3_3_125_2","series-title":"Proceedings of the 21st International Conference on Engineering Design","first-page":"317","volume":"87","year":"2017","unstructured":"\u2020Guilda Rostama, Alexandre Bekhradi, and Bernard Yannou. 2017. From privacy by design to design for privacy. In Proceedings of the 21st International Conference on Engineering Design, Anja Maier, Stanko \u0160kec, Harrison Kim, Michael Kokkolaras, Josef Oehmen, Georges Fadel, Filippo Salustri, and Mike Van der Loos (Eds.). ICED17, Vol. DS87-6. Design Society, Glasgow, United Kingdom, 317\u2013326."},{"key":"e_1_3_3_126_2","volume-title":"Privacy for Sale: How Computerization Has Made Everyone\u2019s Private Life an Open Secret","author":"Rothfeder Jeffrey","year":"1992","unstructured":"Jeffrey Rothfeder. 1992. Privacy for Sale: How Computerization Has Made Everyone\u2019s Private Life an Open Secret. Simon & Schuster Trade, New York, NY."},{"key":"e_1_3_3_127_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-8348-9418-2_2"},{"key":"e_1_3_3_128_2","doi-asserted-by":"publisher","DOI":"10.1007\/s12394-010-0055-x"},{"key":"e_1_3_3_129_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-03418-4_28"},{"key":"e_1_3_3_130_2","volume-title":"Data and Goliath: The Hidden Battles to Capture Your Data and Control Your World (1st. ed.)","author":"Schneier Bruce","year":"2015","unstructured":"Bruce Schneier. 2015. Data and Goliath: The Hidden Battles to Capture Your Data and Control Your World (1st. ed.). W. W. Norton & Company, New York, NY."},{"key":"e_1_3_3_131_2","doi-asserted-by":"publisher","DOI":"10.1007\/s12369-016-0362-y"},{"key":"e_1_3_3_132_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-21752-5_9"},{"key":"e_1_3_3_133_2","doi-asserted-by":"publisher","DOI":"10.1146\/annurev-psych-010418-102803"},{"key":"e_1_3_3_134_2","doi-asserted-by":"publisher","DOI":"10.2307\/41409970"},{"key":"e_1_3_3_135_2","first-page":"2784","article-title":"Open privacy badges for digital policy literacy","volume":"11","year":"2017","unstructured":"*Karen L. Smith, Leslie R. Shade, and Tamara Shepherd. 2017. Open privacy badges for digital policy literacy. Int. J. Commun. 11 (Nov. 2017), 2784\u20132805.","journal-title":"Int. J. Commun."},{"key":"e_1_3_3_136_2","doi-asserted-by":"publisher","DOI":"10.2307\/3481326"},{"key":"e_1_3_3_137_2","volume-title":"Understanding Privacy","author":"Solove Daniel J.","year":"2008","unstructured":"Daniel J. Solove. 2008. Understanding Privacy. Legal Studies Research Paper No. 420, GWU Law School Public Law Research Paper No. 420. Harvard University Press, Cambridge, MA."},{"key":"e_1_3_3_138_2","volume-title":"Privacy, Information, and Technology","author":"Solove Daniel J.","year":"2006","unstructured":"Daniel J. Solove, Marc Rotenberg, and Paul M. Schwartz. 2006. Privacy, Information, and Technology. Aspen Publishers, Inc., New York, NY."},{"key":"e_1_3_3_139_2","series-title":"Italian Conference on Cyber Security","first-page":"223","volume":"2597","author":"Stojkovski Borce","year":"2020","unstructured":"Borce Stojkovski and Gabriele Lenzini. 2020. Evaluating ambiguity of privacy indicators in a secure email app. In Italian Conference on Cyber Security, Michele Loreti and Luca Spalazzi (Eds.). CEUR Workshop Proceedings, Vol. 2597. CEUR-WS Team, Aachen, Germany, 223\u2013234."},{"key":"e_1_3_3_140_2","doi-asserted-by":"publisher","DOI":"10.1109\/SNPD.2017.8022748"},{"key":"e_1_3_3_141_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.is.2019.101469"},{"key":"e_1_3_3_142_2","first-page":"63","article-title":"Privacy in the age of big data: A time for big decisions","volume":"64","author":"Tene Omer","year":"2011","unstructured":"Omer Tene and Jules Polonetsky. 2011. Privacy in the age of big data: A time for big decisions. Stan. L. Rev. Online 64 (Feb. 2011), 63\u201369.","journal-title":"Stan. L. Rev. Online"},{"key":"e_1_3_3_143_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.chb.2018.11.046"},{"key":"e_1_3_3_144_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-42504-3_10"},{"key":"e_1_3_3_145_2","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1090.0260"},{"key":"e_1_3_3_146_2","doi-asserted-by":"publisher","DOI":"10.5210\/fm.v17i7.4010"},{"key":"e_1_3_3_147_2","doi-asserted-by":"publisher","DOI":"10.1109\/RELAW.2014.6893479"},{"key":"e_1_3_3_148_2","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025556"},{"key":"e_1_3_3_149_2","doi-asserted-by":"publisher","DOI":"10.1109\/RCIS.2019.8877022"},{"issue":"2","key":"e_1_3_3_150_2","first-page":"16","article-title":"Guidelines and tools for incorporating privacy in social networking platforms","volume":"12","author":"Vemou Konstantina","year":"2014","unstructured":"Konstantina Vemou and Maria Karyda. 2014. Guidelines and tools for incorporating privacy in social networking platforms. IADIS Int. J. WWW\/Internet 12, 2 (2014), 16\u201333.","journal-title":"IADIS Int. J. WWW\/Internet"},{"key":"e_1_3_3_151_2","doi-asserted-by":"publisher","DOI":"10.1145\/3168389"},{"key":"e_1_3_3_152_2","doi-asserted-by":"publisher","DOI":"10.1145\/272287.272299"},{"key":"e_1_3_3_153_2","doi-asserted-by":"publisher","DOI":"10.1177\/0007650317718185"},{"key":"e_1_3_3_154_2","volume-title":"Privacy and Freedom","author":"Westin Alan F.","year":"1967","unstructured":"Alan F. Westin. 1967. Privacy and Freedom. Athenium, New York."},{"key":"e_1_3_3_155_2","doi-asserted-by":"publisher","DOI":"10.1111\/1540-4560.00072"},{"key":"e_1_3_3_156_2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P16-1126"},{"key":"e_1_3_3_157_2","doi-asserted-by":"publisher","DOI":"10.1145\/3230665"},{"key":"e_1_3_3_158_2","doi-asserted-by":"publisher","DOI":"10.1145\/2601248.2601268"},{"key":"e_1_3_3_159_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.21"},{"key":"e_1_3_3_160_2","volume-title":"Proceedings of the International Conference on Information Systems (ICIS\u201908)","author":"Xu Heng","year":"2008","unstructured":"Heng Xu, Tamara Dinev, H. Jeff Smith, and Paul Hart. 2008. Examining the formation of individual\u2019s privacy concerns: Toward an integrative view. In Proceedings of the International Conference on Information Systems (ICIS\u201908). Association for Information Systems, Atlanta, GA, Article 6."},{"key":"e_1_3_3_161_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2886875"},{"key":"e_1_3_3_162_2","doi-asserted-by":"publisher","DOI":"10.1145\/2808117.2808125"},{"key":"e_1_3_3_163_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24100"},{"key":"e_1_3_3_164_2","doi-asserted-by":"publisher","DOI":"10.1145\/3331184.3331280"},{"key":"e_1_3_3_165_2","volume-title":"Proceedings of the 22nd Americas Conference on Information Systems: Surfing the IT Innovation Wave (AMCIS\u201916)","author":"Zorzo Sergio","year":"2016","unstructured":"Sergio Zorzo, Diego Pontes, Jose Mello, and Diego Dias. 2016. Privacy rules: Approach in the label or textual format. In Proceedings of the 22nd Americas Conference on Information Systems: Surfing the IT Innovation Wave (AMCIS\u201916). Association for Information Systems, Atlanta, GA, 10 pages."},{"key":"e_1_3_3_166_2","doi-asserted-by":"publisher","DOI":"10.1145\/1292491.1292514"}],"container-title":["ACM Computing Surveys"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3502288","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3502288","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:17:05Z","timestamp":1750177025000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3502288"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,2,3]]},"references-count":165,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2023,3,31]]}},"alternative-id":["10.1145\/3502288"],"URL":"https:\/\/doi.org\/10.1145\/3502288","relation":{},"ISSN":["0360-0300","1557-7341"],"issn-type":[{"value":"0360-0300","type":"print"},{"value":"1557-7341","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,2,3]]},"assertion":[{"value":"2020-09-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-11-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2022-02-03","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}