Here at the School of Information, I’ve had the chance to meet and befriend some very talented User Experience Designers and learned a bit about the UX field from them and the odd class here or there. Professionals in the UX field use a variety of standard methods to evaluate and understand their users and how they interact with websites and apps. They worry about things such as consistency and user recognition versus recall, and these are heuristics that I think privacy professionals can learn from. Are the ways we discuss privacy consistent between industries, or even within industries? Do we talk about privacy in such a way that users know what we are talking about? Do 6,000 word privacy policies really protect users? Or do they only tax users’ memory load, causing them to not even look at the policy? For example, Nathan Good, one of the panelists at this breakout session, mentioned that no research has been done into how users discuss privacy and what vocabulary they tend to use. Instead, the vocabulary is driven by policy makers, privacy officers, and lawyers and we have no way of knowing if the users understand what is being discussed.
UX designers use empirical research throughout the process of designing a website to make sure that they are meeting their users needs and desires and a quick search of the web can find some examples of this type of research as applied to privacy and security issues. Maybe its time for privacy pros to call their UX designers and ask about using similar research methods before we design our next generation of privacy policies.
- Privacy and Security. Microsoft User Experience Group, Oct. 2003 http://msdn.microsoft.com/en-us/library/ms976532.aspx
- “Fortune.com revists some of my ideas in light of the introduction of Facebook Groups” Catriona Cornett, Oct. 2010. http://www.inspireux.com/2010/10/11/fortunecom-revisits-some-of-my-ideas-light-of-introduction-of-facebook-groups/