What Security and Privacy Transparency Users Need from Consumer-Facing Generative AI
For designers and policymakers of consumer-facing generative AI, this work identifies gaps in current S&P transparency and proposes design dimensions to improve user trust and informed decision-making.
This paper investigates how users perceive and act on security and privacy (S&P) information in consumer-facing generative AI tools. Through interviews and design sessions with 21 U.S. users, the authors found that existing S&P communications rarely drive adoption, often being seen as incomplete or untrustworthy, and that uncertainty about S&P practices limits usage and can lead to discontinuation. Participants desired trustworthy information (e.g., independent evaluations) and usable interfaces (e.g., on-demand disclosure).
Users increasingly rely on consumer-facing generative AI (GenAI) for tasks ranging from everyday needs to sensitive use cases. Yet, it remains unclear whether and how existing security and privacy (S&P) communications in GenAI tools shape users' adoption decisions and subsequent experiences. Understanding how users seek, interpret, and evaluate S&P information is critical for designing usable transparency that users can trust and act on. We conducted semi-structured interviews and design sessions with 21 U.S. GenAI users. We find that available S&P information rarely drove initial adoption in practice, as participants often perceived it as incomplete, ineffective, or lacking credibility. Instead, they relied on rough proxies, such as popularity, to infer S&P practices. After adoption, uncertainty about S&P practices constrained participants' willingness to use GenAI tools, particularly in high-stakes contexts, and, in some cases, contributed to discontinued use. Participants therefore called for transparency that supports decision-making and use, including trustworthy information (e.g., independent evaluations) and usable interfaces (e.g., on-demand disclosure). We synthesize participants' desired design practices into five dimensions to facilitate systematic future investigation into best practices. We conclude with recommendations for researchers, designers, and policymakers to improve S&P transparency in consumer-facing GenAI.