Collaborative Research: DASS: Empirically Evaluating Data Fiduciary Privacy Laws

合作研究：DASS：实证评估数据信托隐私法

• 批准号: 2317114
• 负责人: Ada Lerner
• 金额: $ 50.05万
• 依托单位: Northeastern University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-10-01 至 2026-09-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2317114&HistoricalAwards=false
• 关键词: Collaborative; Research; DASS; Empirically; Evaluating

Over 160 countries have data privacy laws, yet threats to digital privacy remain a major concern. Research on computers, psychology, society, and the law validates this concern, finding that most of these laws take the same approach of offering people transparency and some measure of control over the use of their personal data. Unfortunately, research finds that this approach fails to protect privacy for many reasons, including people's lack of time and expertise to manage privacy across a vast number of online services and the ways that services undermine privacy rules as they implement them. Legal scholars have proposed alternate approaches to privacy law, but none of them have yet been tested or enacted by legislatures. In this project, therefore, the project team is studying these proposed alternative types of privacy laws in order to predict how online services would change and, thus, how they would affect privacy, especially for those most at risk of privacy violations. By doing so, the team hopes to provide the information needed to make laws that can uphold our societal values of privacy.The project team is evaluating the idea of data fiduciaries as a case study of how it is possible to empirically assess new paradigms of privacy law prior to their being enacted in law. The evaluation takes place in two phases: (1) qualitative methods to evoke expert predictions of how companies would implement data fiduciary laws in specific contexts, and (2) user interviews and speculative design workshops to evaluate whether those predicted implementations would meet the in-context best interests of privacy-vulnerable users. These methods will be validated by applying them to both new and existing laws and comparing results to ground-truth observations of the effects of those laws in the wild across jurisdictions and time, thus resulting in project outcomes that include both new methods for evaluating prospective privacy law paradigms and the evaluation data fiduciaries as a case study.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

超过160个国家 /地区有数据隐私法，但对数字隐私的威胁仍然是一个主要问题。关于计算机，心理学，社会和法律的研究证实了这一问题，发现这些法律中的大多数都采用相同的方法来为人们提供透明度以及对使用其个人数据的使用的某种量度。不幸的是，研究发现，这种方法由于许多原因而无法保护隐私，包括人们缺乏时间和专业知识来管理大量在线服务的隐私以及服务在实施时破坏隐私规则的方式。法律学者提出了有关隐私法的替代方法，但尚未由立法机关对其进行测试或制定。因此，在这个项目中，项目团队正在研究这些提出的替代类型的隐私法，以预测在线服务将如何改变，因此它们将如何影响隐私，尤其是对于最有侵犯隐私风险的人。通过这样做，团队希望提供制定可以维护我们隐私社会价值观的法律所需的信息。项目团队正在评估数据信托的概念，以此作为一个案例研究，以了解如何在法律中颁布的新的隐私法范式。评估分为两个阶段：（1）唤起公司如何在特定情况下实施数据信托法的专家预测的定性方法，以及（2）用户访谈和投机性设计研讨会，以评估这些预测的实施是否符合隐私范围 - 可欺骗用户的最佳利益。这些方法将通过将其应用于新法律和现有法律，并将结果与​​对跨管辖区和时间的野外法律的影响进行比较，从而将结果进行比较，从而导致项目成果，包括包括评估潜在隐私法律的新方法，包括评估预期的paradigms and Case and Condutiation the Internution。智力优点和更广泛的影响审查标准。