Appropriate information flow depends on its social context

What it is

Contextual integrity treats privacy as conformity of personal-information flows with legitimate norms of a social context, not merely secrecy or a consent click. A flow specifies the information subject, sender, recipient, information type, and transmission principle. Changes in role, purpose, confidentiality, reciprocity, compulsion, or other conditions can alter appropriateness. The same fact has no universal circulation rule across healthcare, family, education, and commerce.

Why it happens

Social contexts organize activities through ends, roles, power relations, and historically developed norms. Disclosure relies on that structure to predict who will know, in what capacity, for what ends, and under what onward-transfer condition. Technology that flattens roles into “users,” attributes into “data,” and conditions into one authorization loses those constraints. A privacy disruption can therefore arise from substituted flow parameters without making a secret universally public.

Studying it

Researchers can express a concrete flow as a five-parameter vignette and manipulate subject, sender, recipient, attribute, or transmission principle, measuring acceptability, surprise, and reasons. Interviews and contextual inquiry elicit local roles and norms; factorial experiments estimate which parameters move judgments. Majority expectation alone does not establish legitimacy. Analysis must consider contextual ends, power asymmetry, affected parties, and whether the inherited norm is unjust.

Where it stops holding

Context is not a location or interface page but a social activity structured by roles and ends; several contexts can coexist on one device. Existing norms are not automatically good: discriminatory, oppressive, or technologically obsolete norms require critical evaluation. When expectations around a new technology remain unsettled, asking only what people expect freezes the status quo and cannot replace reasoning about interests, rights, and public values.

Applying it

• Specify subject, sender role, recipient role, attribute, and transmission condition for each flow instead of writing “the platform uses data.”
• Elicit how affected roles understand the activity's end and appropriate circulation, deliberately including less powerful participants and hidden recipients.
• Compare a proposed flow with the established one parameter by parameter, stating who benefits and who bears each changed risk.
• Test paired scenarios differing in one parameter; when people cannot predict the real recipient or condition, revise the flow or explanation and retest comprehension.

Related

• Same group: O1.08.2 Cross-context flow may violate expectations even when technically lawful · O1.08.3 The framework explains why compliance can still provoke objection
• Adjacent: O1.03 Purpose limitation · O2.13 Disclosure of third-party sharing
• Search terms: contextual integrity · informational norms · transmission principle