Personalized Systems Need Adaptable Privacy Statements! How to Make Privacy-related Legal Aspects Usable and Retraceable

This paper presents a solution proposal for the design of usable privacy-enhancing practices in personalization-pertinent systems. In particular, the focus is set on two issues: (i) the design of an Adaptable Privacy Statement that complies with well-known privacy principles and legal demands, and (ii) the description of how to link such an adaptable statement with user interface functions that enhance the comprehension and control of the privacy-critical features of the system. Our proposal is part of our User-centric Privacy Framework, an integrative methodology that considers the main aspects of the three interrelated and highly relevant privacy points of view: legal compliance, technical feasibility, and user-centric design. Exemplarily, we present the applicability of our proposal by focusing on the field of Self-Directed Work-Integrated Learning systems.