People  want reassurance when making privacy-related decisions - not technicalities

Kulyk, Oksana and Renaud, Karen and Costica, Stefan (2023) People  want reassurance when making privacy-related decisions - not technicalities. The Journal of Systems & Software, 200. 111620. ISSN 1873-1228 (https://doi.org/10.1016/j.jss.2023.111620)

[thumbnail of Kulyk-etal-JSS-2023-People-want-reassurance-when-making-privacy-related-decisions]
Preview
 Text. Filename: Kulyk_etal_JSS_2023_People_want_reassurance_when_making_privacy_related_decisions.pdf
Final Published Version
License: Creative Commons Attribution 4.0 logo
Download (2MB)| Preview

Abstract

Online service users sometimes need support when making privacy-related decisions. Humans make decisions either slowly, by painstakingly consulting all possible information, or quickly, by relying on cues to trigger heuristics. Human emotions elicited by the decision context affects decisions, often without the decision maker being aware of it. We wanted to determine how an information-based decision can be supported, and also to understand which cues are used by a heuristics-based approach. Our first study enhanced understanding of underlying encryption mechanisms using metaphors. Our participants objected to efforts to make them `technical experts', expressing a need for reassurance instead. We fed their free-text responses into a Q-sort, to determine which cues they rely on to make heuristic-based decisions. We confirmed the desire for reassurance. Our third study elicited `cyber stories': unprompted narratives about cyber-related experiences to detect emotional undertones in this domain. Responses revealed a general negativity, which is bound to influence cybersecurity-related decisions. We fed their free-text responses into a Q-sort, to determine which cues they rely on to make heuristic-based decisions. We confirmed the desire for reassurance. Our third study elicited `cyber stories': unprompted narratives about cyber-related experiences to detect emotional undertones in this domain. Responses revealed a general negativity, which is bound to influence cybersecurity-related decisions.

CORE (COnnecting REpositories)