i-Right: Identifying and Classifying GDPR User Rights in Fitness Tracker and Smart Home Privacy Policies

Alexia Dini Kounoudes, Georgia M. Kapitsaki, Ioannis Katakis

    Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

    Abstract

    Regulations and laws, such as the EU GDPR, require service providers to inform the users about their data collection and processing practices. The existing method used for the portrayal of the rights and responsibilities of both the user and the service provider in terms of data collection, processing and sharing, are the privacy policies, that depict the practices that an organization or company follows when handling the personal data of its users. In this work, we introduce an automated approach, i-Right that classifies the text of privacy policies from the domains of fitness trackers and smart homes, extracting information regarding the eight GDPR user rights present (e.g. Right to Object). Our results show that i-Right achieves classification of the text with high accuracy. The proposed approach could provide a valuable tool for users to understand how their personal data is handled by service providers and to comprehend the possible risks from using their devices. A side contribution of our work is the creation of a labelled dataset of 133 privacy policies to assist the above process.

    Original languageEnglish
    Title of host publicationWeb Information Systems Engineering – WISE 2024 - 25th International Conference, Proceedings
    EditorsMahmoud Barhamgi, Hua Wang, Xin Wang
    PublisherSpringer Science and Business Media Deutschland GmbH
    Pages243-254
    Number of pages12
    ISBN (Print)9789819605750
    DOIs
    Publication statusPublished - 2025
    Event25th International Conference on Web Information Systems Engineering, WISE 2024 - Doha, Qatar
    Duration: 2 Dec 20245 Dec 2024

    Publication series

    NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
    Volume15440 LNCS
    ISSN (Print)0302-9743
    ISSN (Electronic)1611-3349

    Conference

    Conference25th International Conference on Web Information Systems Engineering, WISE 2024
    Country/TerritoryQatar
    CityDoha
    Period2/12/245/12/24

    Keywords

    • GDPR
    • privacy policy
    • privacy protection
    • smart home

    Fingerprint

    Dive into the research topics of 'i-Right: Identifying and Classifying GDPR User Rights in Fitness Tracker and Smart Home Privacy Policies'. Together they form a unique fingerprint.

    Cite this