More than just informed: The importance of consent facets in smart homes
Authors
Title of the Paper
More than just informed: The importance of consent facets in smart homes
Paper Information
- Topic Area: Privacy, data collection, and the complexity of informed consent in smart homes
- Keywords: Consent, incidental users, smart homes, data collection, privacy, ethics, regulations, user experience, technology design, morality
Research Background and Issues
-
Identified Problems and Challenges:
- Privacy issues in data collection by smart home devices are increasingly severe, particularly for "incidental users" (users who do not own or control the devices). Compared to device owners, they lack control over their data.
- Current legal policies and technical designs often overemphasize "informed consent" while neglecting other critical dimensions of consent (e.g., voluntariness, revocability, specificity, etc.).
- There is a lack of clear understanding regarding which parties (device owners, manufacturers, or incidental users) are responsible for ensuring consent in data collection.
-
Research Motivation and Related Work: This study extends existing literature on online privacy and smart home device privacy by focusing on how to create a data collection environment that is more "consent-meaningful" for incidental users. Specifically, while regulations such as the General Data Protection Regulation (GDPR) mention several dimensions of consent, their practical implementation in smart homes remains inadequate.
Proposed Solution
-
Proposed Methods or Solutions:
- Introduced a multi-dimensional consent framework: The study integrates six dimensions of consent, including "voluntariness," "revocability," "informed," "enthusiastic," "specificity," and "non-burdensome."
- Designed and implemented an online survey based on three main research questions:
- How much does consent influence the acceptability of data collection?
- Do different dimensions of consent have varying impacts on acceptability?
- In what contexts is consent more critical?
-
Innovative Points:
- For the first time, the study comprehensively compares the importance of six consent dimensions in the context of smart homes.
- Through a survey of over 480 U.S. adults, the study explores the interactive effects of device types and user relationship types (e.g., tenant-landlord, cohabitants) on acceptability.
-
Implementation Steps and Key Methods:
- Survey Design: Included scenario-based vignettes and direct questions about consent.
- Scenario descriptions explored how the absence of each consent dimension affects the acceptability of data collection in various contexts.
- Both open-ended and closed-ended questions examined user responsibility, manufacturer responsibility, and data acceptability.
- Data Analysis:
- Bayesian linear mixed-effects regression and Wilcoxon tests were used to analyze changes in acceptability scores.
- Qualitative coding of open-ended responses was conducted to identify emerging themes.
- Survey Design: Included scenario-based vignettes and direct questions about consent.
Research Findings
-
Specific Findings:
- Impact of Consent Dimensions:
- The absence of "voluntariness" had the greatest impact on data acceptability (average score reduction of 1.4), followed by "informed" (reduction of 0.35). The absence of "specificity" had the least impact.
- Overall, 58% of respondents lowered their acceptability scores when consent dimensions were missing.
- Comparative Issues:
- In cases involving mandatory camera surveillance, respondents generally exhibited more negative attitudes, while they were relatively tolerant of data types such as motion sensor applications.
- Perceptions of Responsibility:
- Over 78% of participants believed that device owners were "highly responsible" for obtaining consent, but there was significant disagreement regarding the responsibility of device manufacturers.
- Only 10% of participants believed that incidental users should be responsible for data collection.
- Impact of Consent Dimensions:
-
Advantages Over Existing Solutions:
- Compared to traditional privacy research, this study emphasizes the importance of multi-dimensional consent and, for the first time, measures the independent and relative impact of each dimension on user acceptability in detail.
-
Summary of Experimental Results:
- Consent for data collection in smart homes depends not only on the design of the devices but also on the usage context (e.g., home vs. public spaces) and the social relationships among users.
-
Limitations and Future Directions:
- Limitations:
- Data were primarily collected from U.S. adult users, lacking consideration of cultural differences.
- The scenarios included only a limited combination of devices and relationships, posing some ecological validity concerns.
- Future Research Directions:
- Explore consent preferences in other cultural and social contexts more comprehensively.
- Investigate how device design can reduce social pressure to help incidental users express their preferences more freely.
- Limitations:
Summary and Recommendations
- This study highlights the importance of a multi-dimensional consent framework and proposes a series of recommendations for policymakers, manufacturers, and device owners:
- Policy Level: Regulations should ensure the enforcement of "voluntariness" and "revocability" principles.
- Technical Level: Smart home device manufacturers should develop more user-friendly, transparent, and easily operable privacy control features for incidental users.
- Social Level: Efforts should be made through education and technical standards to change the potential surveillance culture in smart homes, alleviating privacy concerns for non-technical users.
Research Questions / Practical Problems
Question signals indexed for this paper.
Research Questions
3- In smart home environments, which consent dimensions most strongly affect acceptance of data collection?Category: Smart Home and IoT Privacy, Security, and Developer SupportSimilar questionsarrow_forward
- How do different consent dimensions affect user acceptance of data collection across different contexts?Category: Smart Home and IoT Privacy, Security, and Developer SupportSimilar questionsarrow_forward
- Who should be responsible for data collection consent in smart homes: device owners, manufacturers, or incidental users?Category: Smart Home and IoT Privacy, Security, and Developer SupportSimilar questionsarrow_forward
Practical Problems
1- Incidental users in smart homes lack control over data privacy.Category: Smart Home and IoT Privacy, Security, and Developer SupportSimilar questionsarrow_forward
- 100%
Location, Location, Security? Exploring Location-Based Smart Device Security Concerns and Mitigations within Low-Rent Homes
DIS '23· Privacy by Design & User Control +2
- 67%
Monitoring Pets, Deterring Intruders, and Casually Spying on Neighbors: Everyday Uses of Smart Home Cameras
CHI '22· Privacy by Design & User Control +2
- 67%
Broadening Privacy and Surveillance: Eliciting Interconnected Values with a Scenarios Workbook on Smart Home Cameras
DIS '23· Privacy by Design & User Control +2
- 60%
Informing the Design of Privacy-Empowering Tools for the Connected Home
CHI '20· Privacy by Design & User Control +1
- 60%
Critical-Playful Speculations with Cameras in the Home
CHI '22· Privacy by Design & User Control +2
- 60%
Investigating Tangible Privacy-Preserving Mechanisms for Future Smart Homes
CHI '23· Privacy by Design & User Control +1
- 60%
Home Is Where the Smart Is: Development and Validation of the Cybersecurity Self-Efficacy in Smart Homes (CySESH) Scale
CHI '23· Privacy by Design & User Control +1
Based on Jaccard similarity of research subtopics & professions (≥60%)