Legally Binding but Unfair? Towards Assessing Fairness of Privacy Policies

arXiv:2403.08115v1 Announce Type: cross
Abstract: Privacy policies are expected to inform data subjects about their data protection rights. They should explain the data controller's data management practices, and make facts such as retention periods or data transfers to third parties transparent. Privacy policies only fulfill their purpose, if they are correctly perceived, interpreted, understood, and trusted by the data subject. Amongst others, this requires that a privacy policy is written in a fair way, e.g., it does not use polarizing …

abstract arxiv cs.ai cs.cl cs.cy data data management data protection facts fairness management parties practices privacy privacy policies protection retention rights type