How ordinary internet users can have a chance to influence privacy policies

Reviewer: Alan M Arnfeld

An increasing concern for many Internet users is the management of their private data. When interacting with individual Web sites, it is a common experience to be asked to provide personal data, such as name and address. On e-commerce sites, further private data is required, such as payment details and permission to market further products to the individual. This paper discusses an emerging field called obligation management, describing the processes and procedures by which an individual could be allowed greater control over the data he or she provides. This research originated in a European research program concerned with developing processes, procedures, and tools to allow individuals greater control over the management of their personal data (https://www.prime-project.eu/). A prototype Web service is introduced that presents an additional screen to the Web user, allowing the user to define controls and parameters for private data (for example, to set up alerts should personal data be passed to third parties). This is a good introduction to the topic for a wider audience. Unfortunately, the paper has only limited information about the usability testing and human-computer interaction (HCI) design conducted through this program. There is also a clear need for further research on the impact of these additional controls on e-commerce revenue. Online Computing Reviews Service