When Web surfers sign up for a new online service or download a Web application for their smartphone or tablet, the service typically requires them to click a seemingly innocuous box and accept the company’s terms of service and privacy policy.
But agreeing to terms without reading them beforehand can adversely affect a user’s legal rights, says a new paper by a University of Illinois expert in technology and legal issues.
Law professor Jay P. Kesan says the current “non-negotiable approach” to user privacy is in need of serious revision, especially with the increased popularity of Web-based software that shares information through cloud computing.
In a recently published paper in the Washington and Lee Law Review, Kesan and co-authors Carol M. Hayes, a research associate in the College of Law, and Masooda N. Bashir, the assistant director of the Social Trust Initiatives at the U. of I.’s Information Trust Institute, propose creating a legal framework that would require companies to provide baseline protections for personal information while also taking steps to enhance users’ control over their own data.
“Our goal with this piece is to raise awareness of the privacy of online information, which is something that people seem to care about a lot more once they actually know what companies are doing with their personal information and data,” said Kesan, the H. Ross & Helen Workman Research Scholar in the College of Law.
With so many of our daily activities now taking place “in the cloud,” Kesan cautions it’s still perfectly acceptable for users to give away personal information to online services – so long as they’re comfortable with allowing companies to snoop, aggregate and data mine their online habits.
“If you think it’s a fair trade to receive an email service in exchange for letting a company track what Web pages you visit and show you relevant advertisements, by all means, you should continue to do so,” Kesan said. “But there are always security risks involved when information is stored, electronically or not. Users must weigh the advantages and disadvantages of the available options.”
In the article, the scholars analyzed and categorized terms-of-service agreements and privacy policies of several major cloud-based services to assess the state of user privacy. Their analysis shows that providers all take similar approaches to user privacy, in that providers were consistently more detailed when describing the user’s obligations to the provider than when describing the provider’s obligations to the user.
“It’s the provider who sets the terms, knows the terms inside and out, and ultimately benefits from the terms,” Kesan said. “But because these obligations are usually in the form of an ‘adhesion contract,’ and only one party has bargaining power, the consumer does not have the ability to counter with new terms, ones that could increase their benefits.”
In the article, the authors describe personal information as being akin to online currency.
“You’re essentially bartering with a lot of these online service providers,” Kesan said. “You give them access to your information, and they aggregate this information to create a profile of you as a consumer. Most of these companies do not outright sell your information unless you tell them that it’s OK to do so. But by giving them your information in exchange for the service, you have essentially engaged in bartering. And what we want is for people to recognize that this is a business exchange.”
And while the user gives the service what they want, the service also imposes additional terms that the user probably doesn’t read.
“So not only are these one-sided agreements that are designed to benefit the provider of the service, the consumer who clicks ‘I agree’ also is woefully under-informed about what it is that they just agreed to,” Kesan said.
“It’s very difficult to weigh the advantages and disadvantages and then make an informed decision, if you don’t know what’s actually going on. All of this additional information means that their advertising space is more valuable. But when consumers are not informed, they’re bartering their goods in exchange for one identified item and one box with unknown contents.”
That asymmetry, combined with these terms’ non-negotiable nature, led the authors to conclude that there’s a real need for “data control” in the cloud, Kesan said.
According to the authors, they define data control as consisting of two parts: data withdrawal, which is the ability to withdraw data and require a service provider to stop using or storing the user’s information; and data mobility, which is the ability to move data to a new location without being locked into a particular provider.
The Latest Bing News on:
Cloud privacy
- Cloudflare rises after announcing it will join EU Cloud of Conducton May 23, 2022 at 6:20 am
Cloudflare (NET) shares rose early on Monday after the cloud-based security company said it had joined the European Union's Cloud Code of Conduct General Assembly.As part ...
- Research 2022, Cloud System Management Software Market Size Projected to Grow USD 85.02 Billion By 2029on May 23, 2022 at 5:35 am
Companies in the Cloud System Management Software Market are VMware, Inc., Microsoft Corporation, IBM Corporation, BMC Software, Inc., Splunk, Inc., ...
- Central Minnesota's District 13 makes history with 1st all-woman party ticket in St. Cloud areaon May 23, 2022 at 4:15 am
Three Central Minnesota women running for office in District 13 have one thing in common: None of them planned to get involved in politics until about a month ago. Democratic-Farmer-Labor candidates ...
- Cloudflare Joins EU Cloud Code of Conduct, Achieves New Certifications to Accelerate Trust and Compliance Confidence in Cloud Serviceon May 23, 2022 at 2:07 am
(NYSE: NET), the security, performance, and reliability company helping to build a better Internet, today announced it has joined the EU Cloud Code of Conduct (EU Cloud CoC) General Assembly, to help ...
- IDrive e2 cloud storageon May 22, 2022 at 10:01 pm
IDrive e2 gets the essentials right, with value pricing including 10 GB of data for free, along with mobile apps and no charges for data downloads.
- Pentagon wants to take the time to get major cloud awards 'right,' CIO sayson May 19, 2022 at 1:51 pm
John Sherman, DOD's chief information officer, told a congressional committee that while "urgency" is needed to move the Joint Warfighting Cloud Capability contract along so is taking the time to "get ...
- Personal Cloud Storage Market: Introductionon May 19, 2022 at 6:34 am
Introduction The Global Personal Cloud Storage Market has seen continuous development in the past couple of years and is ...
- Alibaba Cloud Launches Data Center in Thailand in Support of the Nation's 20-year Strategyon May 18, 2022 at 8:25 pm
Trusted cloud provider adheres to Thailand security and privacy regulationsProven products and solutions to power digital transformation and a sustainable futureAlibaba Cloud, the digital technology ...
- Cloud-based banking: regulation is the key to cloud migrationon May 18, 2022 at 4:00 am
As a result, consumer confidence shot up by 62%, as people felt more in the custody of their data and privacy. The introduction of similar legislation for the cloud must be both contested and ...
- Multi-Cloud Management Market revenue to cross USD 55 Bn by 2030: Global Market Insights Inc.on May 18, 2022 at 1:15 am
Major multi-cloud management market players include Accenture Plc, BMC Software, Inc., CenturyLink (Lumen Technologies), Citrix Systems, Inc., Cisco Systems, Inc., and others.Selbyville, Delaware, May ...
The Latest Google Headlines on:
Cloud privacy
The Latest Bing News on:
User privacy
- DC sues Zuckerberg over Cambridge Analytica privacy breachon May 23, 2022 at 1:51 pm
The District of Columbia on Monday sued Meta chief Mark Zuckerberg, seeking to hold him personally liable for the Cambridge Analytica scandal, a privacy breach of millions of ...
- Top Tips For Locking Down Privacy Settings On Your Facebook Accounton May 23, 2022 at 10:59 am
Facebook does not have the best track record when it comes to its privacy. However, there are a few things you can do as a user which can help protect your account and personal information. Social ...
- Apple is teaching Google, Facebook and other brands a user privacy lessonon May 20, 2022 at 4:07 am
A young lady named Ellie opens a door in a music store and discovers herself at an auction. And guess what is being auctioned – her own data (Ellie’s Data Auction). She watches as people in ...
- WhatsApp vs Telegram: users, features, privacyon May 20, 2022 at 1:18 am
all privacy options that are not available in WhatsApp. Finally, it should be noted that all WhatsApp users are required to link their account to a real phone number, so it is always possible to see ...
- The Private Sector Steps In to Protect Online Health Privacy, but Critics Say It Can’t Be Trustedon May 19, 2022 at 2:00 am
Health data can be shockingly available. A group of nonprofits and corporations is proposing to patch up the holes in health apps, but many of the biggest companies didn’t participate in the ...
- Apple’s privacy chief talks about backdoors in iOS, GDPR, and more in interviewon May 18, 2022 at 4:55 pm
Privacy has been one of Apple’s main concerns for quite some time, and every year the company announces new ways to make its devices even more secure. This week, ELLE magazine published an interview ...
- Technique protects privacy when making online recommendationson May 18, 2022 at 11:08 am
Researchers have developed a novel privacy-preserving protocol that could enable an algorithm that provides recommendations to guarantee a user's personal information remains secure while ensuring ...
- Apple’s new ad campaign highlights special privacy controls for userson May 18, 2022 at 7:19 am
Brings in more transparency with features such as App Privacy Report and Safari Privacy Report, wherein users can track what data apps are sharing and with which ...
- Why User Consent and First-Party Data are Vital to the Future of Advertisingon May 18, 2022 at 1:00 am
Following her appearance at ATS Madrid, Permutive's Julie Vuibert discusses why user consent and first-party data will be integral to advertising of the future in this exclusive byline. User consent ...
- How the upcoming Google security features will safeguard user privacyon May 13, 2022 at 8:19 pm
In addition, it also unveiled a number of security and privacy features that are coming to its apps and services later this year. Google says that it wants to safeguard user privacy and wants to ...
The Latest Google Headlines on:
User privacy