Privacy policy analysis : a scoping review and research agenda

van der Schyff, Karl and Prior, Suzanne and Renaud, Karen (2024) Privacy policy analysis : a scoping review and research agenda. Computers and Security, 146. 104065. ISSN 0167-4048 (https://doi.org/10.1016/j.cose.2024.104065)

[thumbnail of van-der-Schyff-etal-CS-2024-Privacy-policy-analysis]
Preview
 Text. Filename: van-der-Schyff-etal-CS-2024-Privacy-policy-analysis.pdf
Final Published Version
License: Creative Commons Attribution 4.0 logo
Download (1MB)| Preview

Abstract

Online users often neglect the importance of privacy policies - a critical aspect of digital privacy and data protection. This scoping review addresses this oversight by delving into privacy policy analysis, aiming to establish a comprehensive research agenda. The study's objective was to explore the analytic techniques employed in privacy policy analysis and to identify the associated challenges. Following the Preferred Reporting Items for Systematic Reviews and Meta-Analyses for Scoping Reviews (PRISMA-ScR) checklist, the review selected n = 97 relevant studies. The findings reveal a diverse array of techniques used, encompassing automated machine learning and natural language processing, and manual content analysis. Notably, researchers grapple with challenges like linguistic nuances, ambiguity, and complex data harvesting methods. Additionally, the lack of privacy-centric theoretical frameworks and a dearth of user evaluations in many studies limit their real-world applicability. The review concludes by proposing a set of research recommendations to shape the future research agenda in privacy policy analysis.

ORCID iDs

van der Schyff, Karl, Prior, Suzanne and Renaud, Karen ORCID logoORCID: https://orcid.org/0000-0002-7187-6531;
CORE (COnnecting REpositories)