论文标题
很少考虑隐私:探索网站采用第三方服务的考虑因素
Privacy Rarely Considered: Exploring Considerations in the Adoption of Third-Party Services by Websites
论文作者
论文摘要
现代网站经常使用并嵌入第三方服务来促进网络开发,连接到社交媒体或获利。这通常会引入隐私问题,因为网站上包含第三方服务可以使第三方收集有关网站访问者的个人数据。尽管已经广泛研究了第三方网络跟踪的普遍性和机制,但对导致使用第三方功能导致网站的决策过程以及是否正在努力保护访客的隐私。 我们报告了395名参与网站创建和维护的参与者的在线调查结果。对于十个常见的网站功能,我们研究了隐私是否在整合功能的决策中发挥了作用,是否在集成期间为隐私保护做出了特定的努力,以及人们通过第三方了解数据收集的程度。我们发现易于集成驱动第三方采用,但是如果有法律要求或各自的指导方针,则考虑访客隐私。如果该集合与使用第三方服务的目的直接相关联,那么对数据收集和隐私风险的认识就会更高。
Modern websites frequently use and embed third-party services to facilitate web development, connect to social media, or for monetization. This often introduces privacy issues as the inclusion of third-party services on a website can allow the third party to collect personal data about the website's visitors. While the prevalence and mechanisms of third-party web tracking have been widely studied, little is known about the decision processes that lead to websites using third-party functionality and whether efforts are being made to protect their visitors' privacy. We report results from an online survey with 395 participants involved in the creation and maintenance of websites. For ten common website functionalities we investigated if privacy has played a role in decisions about how the functionality is integrated, if specific efforts for privacy protection have been made during integration, and to what degree people are aware of data collection through third parties. We find that ease of integration drives third-party adoption but visitor privacy is considered if there are legal requirements or respective guidelines. Awareness of data collection and privacy risks is higher if the collection is directly associated with the purpose for which the third-party service is used.