SoK: Three Facets of Privacy Policies - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2019

SoK: Three Facets of Privacy Policies


Privacy policies are the main way to obtain information related to personal data collection and processing. Originally, privacy policies were presented as textual documents. However, the unsuitability of this format for the needs of today's society gave birth to other means of expression. In this paper, we systematically study the different means of expression of privacy policies. In doing so, we have explored the three main categories, which we call facets, ie, natural language, graphical and machine-readable privacy policies. Each of these facets focuses on the particular needs of the communities they come from, ie, law experts, organizations and privacy advocates, and academics, respectively. We then analyze the benefits and limitations of each facet, and explain why solutions based on a single facet do not cover the needs of other communities. Finally, we set guidelines and discuss challenges of an approach to expressing privacy policies which brings together the benefits of each facet as an attempt to overcome their limitations.
Fichier principal
Vignette du fichier
RR-9287.pdf (1.07 Mo) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-02267641 , version 1 (19-08-2019)
hal-02267641 , version 2 (14-11-2019)
hal-02267641 , version 3 (22-11-2019)
hal-02267641 , version 4 (11-09-2020)



Victor Morel, Raúl Pardo. SoK: Three Facets of Privacy Policies. Workshop on Privacy in the Electronic Society, Nov 2020, Virtual, France. ⟨hal-02267641v4⟩
1063 View
1211 Download



Gmail Mastodon Facebook X LinkedIn More