Don‘t Forget the User: From User Preferences to Personal Privacy Policies

With the everlasting emergence of novel technologies that rely on data on the one hand, and the steady digitization of our world on the other hand, personal data became an essential and valuable asset for businesses and research. With the increasing volume of personal data and its usage potential, the risk for misuse of personal data also increases. Furthermore, transparency has to be established, thus users are aware about the processing of their personal data and can take control over the processing according to their preferences. This is done via privacy policies in practice and privacy languages in the literature that are negotiated via specialized user interfaces. In this paper, we focus on how to facilitate the integration of users’ privacy preferences in this privacy policy negotiation process by a broad literature review to identify open research questions.