Analysis of Privacy Policies to Enhance Informed Consent (Extended Version)
This work addresses the challenge of improving data subjects' awareness and choices regarding privacy policies, though it appears incremental as it builds on existing privacy policy analysis concepts.
The authors tackled the problem of enhancing informed consent for personal data processing by developing a privacy policy language and tool to automatically analyze and report privacy risks, illustrated with an IoT example.
In this report, we present an approach to enhance informed consent for the processing of personal data. The approach relies on a privacy policy language used to express, compare and analyze privacy policies. We describe a tool that automatically reports the privacy risks associated with a given privacy policy in order to enhance data subjects' awareness and to allow them to make more informed choices. The risk analysis of privacy policies is illustrated with an IoT example.