We conducted an in-lab user study with 24 participants to explore the usefulness and usability of privacy choices offered by websites. Participants were asked to find and use choices related to email marketing, targeted advertising, or data deletion on a set of nine websites that differed in...

Many websites offer visitors privacy controls and opt-out choices, either to comply with legal requirements or to address consumer privacy concerns. The way these control mechanisms are implemented can significantly affect individuals’ choices and their privacy outcomes. We present an...

Despite experts agreeing on many security best practices, there remains a gap between their advice and users’ behavior. One example is the low adoption of secure mobile payments in the United States, despite widespread prevalence of credit and debit card fraud. Prior work has proposed nudging...

By allowing individuals to be permanently connected to the Internet, mobile devices ease the way information can be accessed and shared online, but also raise novel privacy challenges for end users. Recent behavioral research on “soft” or “asymmetric” paternalism has begun exploring ways...

Although online retailers detail their privacy practices in online privacy policies, this information often remains invisible to consumers, who seldom make the effort to read and understand those policies. This paper reports on research undertaken to determine whether a more prominent display of...

In a series of experiments, we examined how the timing impacts the salience of smartphone app privacy notices. In a web survey and a field experiment, we isolated different timing conditions for displaying privacy notices: in the app store, when an app is started, during app use, and after app...

Among the many factors that can elicit privacy concerns and affect privacy behavior, some are sensorial: detecting the presence of others through our senses. Human beings may be wired to react to sensorial cues and rely, in part, on them to assess the privacy ramifications of their actions....

Self-reported behavioral data is frequently relied upon to understand the population of social network users. These data often consist of self-reported posting, commenting or general engagement frequency within the social network over the last few days or a month. Using a sample of 397 Google+...