{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T17:30:10Z","timestamp":1783791010182,"version":"3.55.0"},"reference-count":43,"publisher":"MDPI AG","issue":"5","license":[{"start":{"date-parts":[[2022,2,25]],"date-time":"2022-02-25T00:00:00Z","timestamp":1645747200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Currently, personal data collection and processing are widely used while providing digital services within mobile sensing networks for their operation, personalization, and improvement. Personal data are any data that identifiably describe a person. Legislative and regulatory documents adopted in recent years define the key requirements for the processing of personal data. They are based on the principles of lawfulness, fairness, and transparency of personal data processing. Privacy policies are the only legitimate way to provide information on how the personal data of service and device users is collected, processed, and stored. Therefore, the problem of making privacy policies clear and transparent is extremely important as its solution would allow end users to comprehend the risks associated with personal data processing. Currently, a number of approaches for analyzing privacy policies written in natural language have been proposed. Most of them require a large training dataset of privacy policies. In the paper, we examine the existing corpora of privacy policies available for training, discuss their features and conclude on the need for a new dataset of privacy policies for devices and services of the Internet of Things as a part of mobile sensing networks. The authors develop a new technique for collecting and cleaning such privacy policies. The proposed technique differs from existing ones by the usage of e-commerce platforms as a starting point for document search and enables more targeted collection of the URLs to the IoT device manufacturers\u2019 privacy policies. The software tool implementing this technique was used to collect a new corpus of documents in English containing 592 unique privacy policies. The collected corpus contains mainly privacy policies that are developed for the Internet of Things and reflect the latest legislative requirements. The paper also presents the results of the statistical and semantic analysis of the collected privacy policies. These results could be further used by the researchers when elaborating techniques for analysis of the privacy policies written in natural language targeted to enhance their transparency for the end user.<\/jats:p>","DOI":"10.3390\/s22051838","type":"journal-article","created":{"date-parts":[[2022,2,27]],"date-time":"2022-02-27T20:48:33Z","timestamp":1645994913000},"page":"1838","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":9,"title":["Privacy Policies of IoT Devices: Collection and Analysis"],"prefix":"10.3390","volume":"22","author":[{"given":"Mikhail","family":"Kuznetsov","sequence":"first","affiliation":[{"name":"Department of Computer Science and Engineering, St. Petersburg Electrotechnical University \u201cLETI\u201d, 197022 St. Petersburg, Russia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2923-4954","authenticated-orcid":false,"given":"Evgenia","family":"Novikova","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, St. Petersburg Electrotechnical University \u201cLETI\u201d, 197022 St. Petersburg, Russia"},{"name":"Computer Security Problems Laboratory, St. Petersburg Federal Research Center of the Russian Academy of Sciences, 199178 St. Petersburg, Russia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6859-7120","authenticated-orcid":false,"given":"Igor","family":"Kotenko","sequence":"additional","affiliation":[{"name":"Computer Security Problems Laboratory, St. Petersburg Federal Research Center of the Russian Academy of Sciences, 199178 St. Petersburg, Russia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6707-9153","authenticated-orcid":false,"given":"Elena","family":"Doynikova","sequence":"additional","affiliation":[{"name":"Computer Security Problems Laboratory, St. Petersburg Federal Research Center of the Russian Academy of Sciences, 199178 St. Petersburg, Russia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2022,2,25]]},"reference":[{"key":"ref_1","unstructured":"(2022, January 30). General Data Protection Regulation Website. Available online: http:\/\/data.europa.eu\/eli\/reg\/2016\/679\/oj."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"992","DOI":"10.1016\/j.chb.2015.09.038","article-title":"\u201cI agree to the terms and conditions\u201d: (How) do users read privacy policies online? An eye-tracking experiment","volume":"55","author":"Steinfeld","year":"2016","journal-title":"Comput. Hum. Behav."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3372296","article-title":"The Dilemma of User Engagement in Privacy Notices: Effects of Interaction Modes and Habituation on User Attention","volume":"23","author":"Karegar","year":"2020","journal-title":"ACM Trans. Priv. Secur."},{"key":"ref_4","unstructured":"(2021, January 31). Usable Privacy Policy Project Website. Available online: https:\/\/usableprivacy.org."},{"key":"ref_5","unstructured":"Harkous, H., Fawaz, K., Lebret, R., Schaub, F., Shin, K., and Aberer, K. (2018, January 15\u201317). Polisis: Automated analysis and presentation of privacy policies using deep learning. Proceedings of the 27th USENIX Conference on Security Symposium (SEC\u201918), Baltimore, MD, USA."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Katsikas, S., Cuppens, F., Cuppens, N., Lambrinoudakis, C., Kalloniatis, C., Mylopoulos, J., Ant\u00f3n, A., Gritzalis, S., Meng, W., and Furnell, S. (2020). P2Onto: Making Privacy Policies Transparent. Computer Security, Proceedings of the International Workshop on Attacks and Defenses for Internet-of-Things, Surrey, UK, 14\u201318 September 2020, Springer.","DOI":"10.1007\/978-3-030-64330-0"},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Kuznetzov, M., and Novikova, E. (2021, January 7\u201310). Towards application of text mining techniques to the analysis of the privacy policies. Proceedings of the 10th Mediterranean Conference on Embedded Computing (MECO), Budva, Montenegro.","DOI":"10.1109\/MECO52532.2021.9460130"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Ahmad, W., Chi, J., Tian, Y., and Chang, K.-W. (2020). PolicyQA: A Reading Comprehension Dataset for Privacy Policies. Findings of the Association for Computational Linguistics, Proceedings of EMNLP, Online, November 2020, Association for Computational Linguistics.","DOI":"10.18653\/v1\/2020.findings-emnlp.66"},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3127519","article-title":"PrivacyCheck: Automatic Summarization of Privacy Policies Using Data Mining","volume":"18","author":"Zaeem","year":"2018","journal-title":"ACM Trans. Internet Technol."},{"key":"ref_10","unstructured":"(2021, January 31). Amazon Alexa Site Ranking Website. Available online: https:\/\/www.alexa.com."},{"key":"ref_11","unstructured":"(2021, January 31). Amazon Website. Available online: https:\/\/amazon.com."},{"key":"ref_12","unstructured":"(2021, January 31). Walmart Website. Available online: https:\/\/walmart.com."},{"key":"ref_13","unstructured":"(2021, January 31). Google Website. Available online: https:\/\/google.com."},{"key":"ref_14","first-page":"91","article-title":"Legal ontology for modelling GDPR concepts and norms","volume":"313","author":"Palmirani","year":"2018","journal-title":"Leg. Knowl. Inf. Syst."},{"key":"ref_15","unstructured":"Pandit, H.J., O\u2019Sullivan, D., and Lewis, D. (2018, January 9). An Ontology Design Pattern for Describing Personal Data in Privacy Policies. Proceedings of the WOP@ISWC, Monterey, CA, USA."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"185","DOI":"10.3233\/SW-170283","article-title":"PrivOnto: A semantic framework for the analysis of privacy policies","volume":"9","author":"Oltramari","year":"2018","journal-title":"Semant. Web"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Wilson, A., Schaub, F., Dara, A.A., Liu, F., Cherivirala, S., Leon, P.G., Andersen, M.S., Zimmeck, S., Sathyendra, K.M., and Russell, N.C. (2016, January 7\u201312). The Creation and Analysis of a Website Privacy Policy Corpus. Proceedings of the 54th Annual Meeting of the Association for Computational Linguistics, Berlin, Germany.","DOI":"10.18653\/v1\/P16-1126"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"66","DOI":"10.2478\/popets-2019-0037","article-title":"MAPS: Scaling privacy compliance analysis to a million apps","volume":"2019","author":"Zimmeck","year":"2019","journal-title":"Proc. Priv. Enhancing Technol."},{"key":"ref_19","unstructured":"Zaeem, R.N., and Barber, K.S. (2021, January 26\u201328). A Large Publicly Available Corpus of Website Privacy Policies Based on DMOZ. Proceedings of the Eleventh ACM Conference on Data and Application Security and Privacy, Virtual Event."},{"key":"ref_20","first-page":"29","article-title":"Tracking website data-collection and privacy practices with the iWatch web crawler","volume":"229","author":"Jensen","year":"2007","journal-title":"ACM Int. Conf. Proc. Ser."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Hosseini, M.B., Heaps, J., Slavin, R., Breaux, T., and Niu, J. (2021, January 20\u201324). Ambiguity and Generality in Natural Language Privacy Policies. Proceedings of the 29th International IEEE Requirements Engineering Conference, Notre Dame, IN, USA.","DOI":"10.1109\/RE51729.2021.00014"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"106608","DOI":"10.1016\/j.infsof.2021.106608","article-title":"Analyzing Privacy Policies through Syntax-Driven Semantic Analysis of Information Types","volume":"138","author":"Hosseini","year":"2021","journal-title":"Inf. Softw. Technol. IST J."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Poplavska, E., Norton, T.B., Wilson, S., and Sadeh, N. (2020, January 9\u201311). From Prescription to Description: Mapping the GDPR to a Privacy Policy Corpus Annotation Scheme. Proceedings of the 33rd International Conference on Legal Knowledge and Information Systems (JURIX), Brno, Czech Republic.","DOI":"10.3233\/FAIA200874"},{"key":"ref_24","unstructured":"(2021, January 31). Google Play Website. Available online: https:\/\/play.google.com\/store."},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Amos, R., Acar, G., Lucherini, E., Kshirsagar, M., Narayanan, A., and Mayer, J. (2021, January 19\u201323). Privacy Policies over Time: Curation and Analysis of a Million-Document Dataset. Proceedings of the Web Conference 2021, Ljubljana, Slovenia.","DOI":"10.1145\/3442381.3450048"},{"key":"ref_26","unstructured":"Amos, R., Acar, G., Lucherini, E., Kshirsagar, M., Narayanan, A., and Mayer, J. (2021, January 31). Princeton-Leuven Longitudinal Privacy Policy Dataset. GitHub Repository. Available online: https:\/\/github.com\/citp\/privacy-policy-historical."},{"key":"ref_27","unstructured":"(2021, January 31). Curlie Is the Largest Human-Edited Directory of the Web. Available online: https:\/\/curlie.org."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Srinath, M., Shomir, W., and Giles, C. (2021, January 1\u20136). Privacy at Scale: Introducing the PrivaSeer Corpus of Web Privacy Policies. Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conference on Natural Language Processing, Online.","DOI":"10.18653\/v1\/2021.acl-long.532"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Ravichander, A., Black, A.W., Wilson, S., Norton, T., and Sadeh, N. (2019, January 3\u20134). Question Answering for Privacy Policies: Combining Computational and Legal Perspectives. Proceedings of the 2019 Conference on Empirical Methods in Natural Language Processing (EMNLP 2019), Hong Kong, China.","DOI":"10.18653\/v1\/D19-1500"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Brambilla, M., Chbeir, R., Frasincar, F., and Manolescu, I. (2021). PrivaSeer: A Privacy Policy Search Engine. Web Engineering, Lecture Notes in Computer Science 12706, Proceedings of the ICWE (2021), Springer.","DOI":"10.1007\/978-3-030-74296-6"},{"key":"ref_31","unstructured":"(2021, January 31). Platform for Privacy Preferences (P3P) Project. Available online: https:\/\/www.w3.org\/P3P."},{"key":"ref_32","unstructured":"(2021, January 31). Selenium with Python. Available online: https:\/\/selenium-python.readthedocs.io\/."},{"key":"ref_33","unstructured":"(2021, January 31). Serpent.Io Website. Available online: https:\/\/serpent.io."},{"key":"ref_34","unstructured":"(2021, January 31). Bing Search API Website. Available online: https:\/\/www.bing.com."},{"key":"ref_35","unstructured":"(2021, January 31). Serpapi Website. Available online: https:\/\/serpapi.com."},{"key":"ref_36","unstructured":"(2021, January 31). RapidAPI Website. Available online: https:\/\/rapidapi.com\/collection\/web-search-api."},{"key":"ref_37","unstructured":"(2022, January 30). August Privacy Policy and Agreements. Available online: https:\/\/august.com\/pages\/privacy-policy."},{"key":"ref_38","unstructured":"(2021, January 31). Huawei Privacy Policy. Available online: https:\/\/huawei.eu\/privacy-policy."},{"key":"ref_39","unstructured":"Kuzntesov, M., and Novikova, E. (2021, January 31). IoT Privacy Policy Data Set V1. GitHub Repository. Available online: https:\/\/github.com\/user160244980349\/iot-dataset."},{"key":"ref_40","first-page":"993","article-title":"Latent Dirichlet Allocation","volume":"3","author":"Blei","year":"2003","journal-title":"J. Mach. Learn. Res."},{"key":"ref_41","unstructured":"(2021, January 31). Natural Language Toolkit Website. Available online: https:\/\/www.nltk.org."},{"key":"ref_42","unstructured":"(2021, January 31). Gensim Text Processing Library. Available online: https:\/\/radimrehurek.com\/gensim."},{"key":"ref_43","unstructured":"Kuzntesov, M., and Novikova, E. (2021, January 31). Tool for Crawling and Sanitization of Privacy Policy Documents for IoT. GitHub Repository. Available online: https:\/\/github.com\/user160244980349\/iot-crawler."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/5\/1838\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T22:27:57Z","timestamp":1760135277000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/5\/1838"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,2,25]]},"references-count":43,"journal-issue":{"issue":"5","published-online":{"date-parts":[[2022,3]]}},"alternative-id":["s22051838"],"URL":"https:\/\/doi.org\/10.3390\/s22051838","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,2,25]]}}}