CAREER: Usable, Data-Driven Transparency and Access for Consumer Privacy

职业：可用、数据驱动的透明度和消费者隐私访问

• 批准号: 2047827
• 负责人: Blase Ur
• 金额: $ 54.95万
• 依托单位: University of Chicago
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2021
• 资助国家: 美国
• 起止时间: 2021-04-01 至 2026-03-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2047827&HistoricalAwards=false
• 关键词: CAREER; Usable; Data; Driven; Transparency

Data collected about consumers underpins online personalization, yet raises critical privacy concerns. Mitigating these concerns requires giving consumers awareness and access to, data collected about them. To date, though, consumers have been given limited insight through these mechanisms. Attempts to provide awareness have centered on static disclosures of limited utility. Access rights for collected data have mostly been ignored or manifested as meaningless database exports. Unfortunately, consumers struggle to learn what has been collected, by whom, and especially what this collection implies for their privacy. This project aims to improve data transparency and access rights by developing novel models, user interactions, and open-source privacy tools. These techniques and tools will empower consumers to protect their privacy in a data-driven world. Furthermore, the project will enhance education and outreach. The investigator will develop a pilot program for engaging early-career students in research, create a new privacy course for underprivileged high school students, and both develop and exhibit artworks designed to provoke reflection on individual privacy, by collaborating with the School of the Art Institute of Chicago and the Chicago Museum of Science and Industry.The project will center around the intellectual development of complementary tools that give consumers data-driven insight into (i) the huge archives companies give consumers who exercise data-access rights and (ii) the online third-party tracking ecosystem. Several intellectual challenges stand in the way. First, usable transparency about voluminous data requires automatic methods that surface the information that matters most to consumers. The project will address this challenge through formative user studies and the iterative development and evaluation of a data-access tool. In addition, the project will develop new techniques for identifying, integrating, and visualizing data archives. Second, because the raw data collected about a consumer provides only partial transparency, the project will develop new methods for communicating, in an individualized manner, inferences possible from data. Third, as transparency is powerless without recourse, the project will understand the types of recourse users desire and develop tools that identify and mitigate privacy-tool-related website breakage at scale.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

收集的消费者数据支撑着在线个性化，但也引发了严重的隐私问题。减轻这些担忧需要让消费者了解并访问所收集的有关他们的数据。但迄今为止，消费者通过这些机制获得的了解有限。提高认识的尝试主要集中在效用有限的静态披露上。所收集数据的访问权限大多被忽视或表现为毫无意义的数据库导出。不幸的是，消费者很难了解收集了什么、由谁收集，尤其是这些收集对他们的隐私意味着什么。该项目旨在通过开发新颖的模型、用户交互和开源隐私工具来提高数据透明度和访问权限。这些技术和工具将使消费者能够在数据驱动的世界中保护自己的隐私。此外，该项目还将加强教育和宣传。研究人员将与艺术学院合作，制定一项试点计划，让处于职业生涯早期的学生参与研究，为贫困高中生开设新的隐私课程，并开发和展示旨在引发对个人隐私反思的艺术品该项目将围绕补充工具的智能开发，为消费者提供数据驱动的洞察力：(i) 庞大的档案公司为行使数据访问权的消费者提供信息，以及 (ii)在线第三方跟踪生态系统。一些智力挑战阻碍了这一进程。首先，大量数据的可用透明度需要自动方法来显示对消费者最重要的信息。该项目将通过形成性用户研究以及数据访问工具的迭代开发和评估来应对这一挑战。此外，该项目还将开发用于识别、集成和可视化数据档案的新技术。其次，由于收集的有关消费者的原始数据仅提供部分透明度，因此该项目将开发新的方法，以个性化的方式传达从数据中可能得出的推论。第三，由于没有追索权，透明度就无能为力，因此该项目将了解用户期望的追索类型，并开发能够大规模识别和减轻与隐私工具相关的网站破坏的工具。该奖项反映了 NSF 的法定使命，并被认为值得通过以下方式获得支持：使用基金会的智力价值和更广泛的影响审查标准进行评估。

项目成果

Who Am I?: A Design Probe Exploring Real-Time Transparency about Online and Offline User Profiling Underlying Targeted Ads

我是谁？：探索目标广告下在线和离线用户分析的实时透明度的设计探针

• DOI: 10.1145/3478122
• 发表时间: 2021-09
• 期刊: Wearable and Ubiquitous Technologies
• 作者: Barbosa, Natã M.;Wang, Gang;Ur, Blase;Wang, Yang
• 通讯作者: Wang, Yang

Defining "Broken": User Experiences and Remediation Tactics When Ad-Blocking or Tracking-Protection Tools Break a Website’s User Experience

定义“损坏”：广告拦截或跟踪保护工具破坏网站用户体验时的用户体验和补救策略

• 发表时间: 2023-01
• 期刊: Proceedings of the 32nd USENIX Security Symposium
• 作者: Nisenoff, Alexandra;Borem, Arthur;Pickering, Madison;Nakanishi, Grant;Thumpasery, Maya;Ur, Blase
• 通讯作者: Ur, Blase

Data Subjects’ Reactions to Exercising Their Right of Access

数据主体对行使其访问权的反应

• 发表时间: 2024-08
• 期刊: Proceedings of the 33rd USENIX Security Symposium
• 作者: Borem, Arthur;Pan, Elleen;Obielodan, Olufunmilola;Roubinowitz, Aurelie;Dovichi, Luca;Mazurek, Michelle L.;Ur, Blase
• 通讯作者: Ur, Blase

Pursuing Usable and Useful Data Downloads Under GDPR/CCPA Access Rights via Co-Design

通过协同设计根据 GDPR/CCPA 访问权追求可用且有用的数据下载

• 发表时间: 2021-01
• 期刊: Proceedings of the USENIX Symposium on Usable Privacy and Security (SOUPS
• 作者: Veys, Sophie;Serrano, Daniel;Stamos, Madison;Herman, Margot;Reitinger, Nathan;Mazurek, Michelle L;Ur, Blase
• 通讯作者: Ur, Blase

JupyterLab in Retrograde: Contextual Notifications That Highlight Fairness and Bias Issues for Data Scientists

JupyterLab 逆行：强调数据科学家公平性和偏见问题的上下文通知

• 发表时间: 2024-05
• 期刊: Proceedings of the CHI Conference on Human Factors in Computing Systems
• 作者: Harrison, Galen;Bryson, Kevin;Bamba, Ahmad Emmanuel;Dovichi, Luca;Binion, Aleksander Herrmann;Borem, Arthur;Ur, Blase
• 通讯作者: Ur, Blase