Kiyoshi Murata    Department   Undergraduate School  , School of Commerce    Position   Professor
Date	2014/07/10
Presentation Theme	Introduction to Privacy Policy Manager (PPM)
Conference	Asian Privacy Scholars Network 4th International Conference
Promoters	Meiji University
Conference Type	International
Presentation Type	Speech (General)
Contribution Type	Collaborative
Venue	Tokyo, Japan
Publisher and common publisher	Toru Nakamura, Andrew A. Adams, Kiyoshi Murata, Shisaku Kiyomoto, Haruo Takasaki, Ryu Watanabe and Yutaka Miyake
Details	Personalization has been successfully implemented in a variety of online services such as targeted advertisements, individualized searches, and location-based information provision. Privacy has been a major concern for users of personalized services, not only regarding online web services but also offline real services. Online to Offline (O2O) is a new direction for commercial services; however, privacy concerns have risen due to the expansion of service provider collaborations. Users have been very concerned when diverted to services they were unaware of having any relationship with. We introduce a new mechanism for providing ongoing privacy and data protection control to users, called the Privacy Policy Manager (PPM). PPM provides ID management service, proxy service including an access control mechanism, and etc. The goal of the PPM is to provide users with greater and simpler control of their provision of individual data to online service providers, including default, site-specific and session-specific control, a trace of information previously provided and a mechanism for informing service providers of request for deletion of data. It is not simply a P3P user agent and although it could use P3P as a mechanism, it is not limited to the P3P details. We implemented a prototype of PPM and some demonstration services via PCs and Android smartphones. We show some important features and functions, such as personalization of privacy policies, privacy policy checking, log viewing, and deletion of personal information. We show the result of survey on user reactions to the concept and prototype of a PPM by experiments via explanation and video demonstration. The experiment's objective was to gain data on (i) attitudes to privacy policies and personalized services (ii) the potential impact of the PPM, particularly in reducing privacy concerns, and (iii) acceptability assessment of the PPM. The experiments which we assessed the acceptability of the PPM are separated into the following three parts. In Pre-Questionnaire part, we asked participants about their knowledge of IT services, frequency of service use, and general impression of privacy policy descriptions and usage of personal data in an initial questionnaire. In Introduction of PPM part, we explained the PPM to participants, including video demonstrations of it in use (at the time of the experiment it was not robust enough for participants to use themselves). In Post-Questionnaire part, we asked participants to give their impressions of the PPM, the effort they would need to use the PPM, and their level of interest in using it.