DMCA
The lack of clarity in financial privacy policies and the need for standardization (2003)
| Venue: | IEEE Security and Privacy |
| Citations: | 12 - 3 self |
BibTeX
@TECHREPORT{Antón03thelack,
author = {Annie I. Antón and Julia B. Earp and Davide Bolchini and Qingfeng He and Carlos Jensen and William Stufflebeam and The Need For Standardization},
title = {The lack of clarity in financial privacy policies and the need for standardization},
institution = {IEEE Security and Privacy},
year = {2003}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
This paper discusses the lack of clarity of 40 online privacy statements from nine financial institutions that are covered by the Gramm-Leach-Bliley Act (GLBA), which states that policies must be “clear and conspicuous. ” The study is novel in that it uses two complimentary approaches to analyze the clarity of policies: goal-driven requirements engineering and readability analysis of privacy policy statements based on proven metrics. Our findings show that compliance with the GLBA “clear and conspicuous” requirement by the analyzed policies is at best questionable, and demonstrate that most policies require a reading skill considerably higher than the Internet population’s average literacy level. 1
Keyphrases
financial privacy policy internet population average literacy level analyzed policy privacy policy statement conspicuous requirement proven metric gramm-leach-bliley act financial institution reading skill readability analysis complimentary approach online privacy statement goal-driven requirement engineering
