Assessment Instrument for Privacy Policy Content: Design and Evaluation of PPC

Proceedings of the Pre-ICIS Workshop on Information Security and Privacy. Auckland, New Zealand, 2014

18 Pages Posted: 19 Aug 2015

See all articles by Tobias Dehling

Tobias Dehling

Karlsruhe Institute of Technology

Fangjian Gao

University of Cologne

Ali Sunyaev

University of Cologne

Date Written: December 13, 2014

Abstract

Privacy policies are notices posted by providers and intended to inform users about privacy practices. However, extant research shows that privacy policies are often of poor quality and do not address users’ concerns. In this paper, we design and develop PPC – a privacy policy content assessment instrument to support assessments of whether offered privacy policy content provides comprehensive information addressing users’ privacy concerns. PPC is developed based on extant research, standards, and guidelines. Application of PPC to 62 privacy policies of mHealth apps available in iOS and Android demonstrates utility of PPC and suitability of PPC as assessment instrument for privacy policy content. Contributions of our research are twofold: For research, we conduct improvement design science research contributing to design theory on assessment of privacy policy content. For practice, potential applications of PPC are support in privacy policy development and identification of deficiencies in offered privacy policies. In addition, through evaluation of PPC, we reveal an insufficient current state of mHealth app privacy policy content.

Keywords: information security, information privacy, privacy policy, privacy practices, privacy policy content, P3P, mHealth, health IT

JEL Classification: L86

Suggested Citation

Dehling, Tobias and Gao, Fangjian and Sunyaev, Ali, Assessment Instrument for Privacy Policy Content: Design and Evaluation of PPC (December 13, 2014). Proceedings of the Pre-ICIS Workshop on Information Security and Privacy. Auckland, New Zealand, 2014 . Available at SSRN: https://ssrn.com/abstract=2646460

Tobias Dehling (Contact Author)

Karlsruhe Institute of Technology ( email )

Kaiserstraße 12
Karlsruhe, Baden Württemberg 76131
Germany

Fangjian Gao

University of Cologne ( email )

Albertus-Magnus-Platz
Cologne, 50923
Germany

Ali Sunyaev

University of Cologne ( email )

Albertus-Magnus-Platz
Cologne, 50923
Germany

HOME PAGE: http://www.isq.uni-koeln.de

Register to save articles to
your library

Register

Paper statistics

Downloads
22
Abstract Views
219
PlumX Metrics