NDLI: A large-scale empirical study of P3P privacy policies: Stated actions vs. legal obligations

Please wait, while we are loading the content...

A large-scale empirical study of P3P privacy policies: Stated actions vs. legal obligations

Content Provider	ACM Digital Library
Author	Reay, Ian Miller, James Dick, Scott
Copyright Year	2009
Abstract	Numerous studies over the past ten years have shown that concern for personal privacy is a major impediment to the growth of e-commerce. These concerns are so serious that most if not all consumer watchdog groups have called for some form of privacy protection for Internet users. In response, many nations around the world, including all European Union nations, Canada, Japan, and Australia, have enacted national legislation establishing mandatory safeguards for personal privacy. However, recent evidence indicates that Web sites might not be adhering to the requirements of this legislation. The goal of this study is to examine the posted privacy policies of Web sites, and compare these statements to the legal mandates under which the Web sites operate. We harvested all available P3P (Platform for Privacy Preferences Protocol) documents from the 100,000 most popular Web sites (over 3,000 full policies, and another 3,000 compact policies). This allows us to undertake an automated analysis of adherence to legal mandates on Web sites that most impact the average Internet user. Our findings show that Web sites generally do not even claim to follow all the privacy-protection mandates in their legal jurisdiction (we do not examine actual practice, only posted policies). Furthermore, this general statement appears to be true for every jurisdiction with privacy laws and any significant number of P3P policies, including European Union nations, Canada, Australia, and Web sites in the USA Safe Harbor program.
Starting Page	1
Ending Page	34
Page Count	34
File Format	PDF
ISSN	15591131
e-ISSN	1559114X
DOI	10.1145/1513876.1513878
Volume Number	3
Issue Number	2
Journal	ACM Transactions on the Web (TWEB)
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2009-04-30
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	P3P Privacy protection Electronic commerce Legislation and enforcement
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

P3P Adoption on E-Commerce Web sites: A Survey and Analysis

Data Retention and Privacy in Electronic Communications

Society cannot function without privacy

Privacy vs. information technology

Privacy policies and national culture on the internet

P3P: making privacy policies more useful

Sociotechnical architecture for online privacy

Privacy in distributed electronic commerce

Understanding privacy policies : A study in empirical analysis of language usage

A large-scale empirical study of P3P privacy policies: Stated actions vs. legal obligations

Similar Documents

P3P Adoption on E-Commerce Web sites: A Survey and Analysis

Data Retention and Privacy in Electronic Communications

Society cannot function without privacy

Privacy vs. information technology

Privacy policies and national culture on the internet

P3P: making privacy policies more useful

Sociotechnical architecture for online privacy

Privacy in distributed electronic commerce

Understanding privacy policies : A study in empirical analysis of language usage

A large-scale empirical study of P3P privacy policies: Stated actions vs. legal obligations