Arabic Privacy Policy Corpus and Classification

Mashaabi, Malak; Al-Yahya, Ghadi; Alnashwan, Raghad; Al‐Khalifa, Hend S.

doi:10.1007/978-3-031-35320-8_7

Cited by 2 publications

(3 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Additionally, the vast majority of existing work in privacy policy content analysis, including work not explicitly focusing on changes due to new legislation, only considered policies in the English language, which leaves privacy disclosure practices in large parts of the world underexplored. Only recently has the analysis of non-English privacy policies started to receive attention, with existing work either exploring privacy policies at one or two points in time [5,39] or focusing on descriptive statistics and the prevalence of specific key phrases [15] or corpus creation and annotation [2,14].…”

Section: Introductionmentioning

confidence: 99%

“…According to Article 3, the GDPR applies to both data controllers and processors if they are established in the EU and process personal data or, if established only outside the EU, they offer services to data subjects in the EU. On the contrary, according to its Section 1798.140(c) (1), the CCPA/CPRA does not bind all businesses and service providers but only those who (1) do business in California (2) with Californian residents and (3) either (i) buy, sell, or share the personal data of at least 100,000 consumers or only collect the personal data of at least 50,000 consumers, or (ii) had a gross annual revenue of at least US $25 million in the preceding year, or (iii) generate at least 50 % of their annual revenue from selling or sharing personal information.…”

Section: Introductionmentioning

confidence: 99%

“…Proceedings on Privacy Enhancing Technologies 2024(2) Henry Hosseini, Christine Utz, Martin Degeling, and Thomas Hupperich…”

mentioning

confidence: 99%

See 2 more Smart Citations

A Bilingual Longitudinal Analysis of Privacy Policies Measuring the Impacts of the GDPR and the CCPA/CPRA

Hosseini,

Utz,

Degeling

et al. 2024

PoPETs

View full text Add to dashboard Cite

Privacy policies are the main mechanism for websites to describe their practices in collecting and processing visitors' personal data. Their format and content are subject to legal requirements that have changed due to recent new privacy regulations including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and California Privacy Rights Act (CPRA). Studying how privacy policies are adapted to such regulatory change can help identify shortcomings in implementing the law and inform future legislatory initiatives. Existing work in this area mostly studied effects of the GDPR on privacy policies or the "Do Not Sell My Personal Information" link mandated by the CCPA. Methodologically, insights were mainly drawn from English-language privacy policies using keyword-based analyses or machine learning classifiers. In this work, we address this research gap and conduct a bilingual study of privacy policies in English and German that investigates the effects of the GDPR and CCPA/CPRA on privacy policy content, using established methods from corpus linguistics that are language-independent and do not rely on keyword lists or classifiers that may date quickly. We find that, unlike for the GDPR, the CCPA's requirements were not yet widely implemented when it first became enforceable but only with its amendment, the CPRA. Before that, websites used more than 60 variants of the "Do Not Sell" link instead of the mandated wording and did not prominently reference individual rights granted by the CCPA/CPRA. While companies outside California and the US did adapt their disclosures to the CCPA/CPRA, this was limited to English-language policies and did not spill over to policies in German. For GDPR enforcement, we find websites to increasingly rely on legitimate interests to justify data collection, raising concerns whether individuals' interests in the privacy of their personal information are still sufficiently considered.

show abstract

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

A Bilingual Longitudinal Analysis of Privacy Policies Measuring the Impacts of the GDPR and the CCPA/CPRA

Hosseini,

Utz,

Degeling

et al. 2024

PoPETs

View full text Add to dashboard Cite

show abstract

Privacy practices of popular websites in Saudi Arabia

Alhazmi,

Daghistani

2024

J. Umm Al-Qura Univ. Eng.Archit.

View full text Add to dashboard Cite

Preserving users’ privacy while exploring the Internet is a continuous challenge. Regulations such as GDPR, CCPA, and PDPL have been introduced to counter privacy-invasive trends. This paper introduces a framework for inspecting the state of popular websites in preserving the privacy of their visitors. The framework can be used to analyze websites in both Arabic and English languages. We use it to report the current state of popular websites in Saudi Arabia. We examined the state of these websites three months before the official enforcement of the Personal Data Protection Law (PDPL). Therefore, the paper shows the degree of alignment for popular websites in Saudi Arabia with PDPL. We analyze 723 websites and explore their utilization of cookies. We examined whether these websites inform their visitors of cookie usage and obtain visitors’ consent. We assess whether these websites detail their privacy policies to their visitors. Our results demonstrated that approximately 85% of websites that use cookies don’t display cookie banners or policies to their visitors, potentially depriving users from their PDPL-specified rights such as being informed of data collection. Our analysis shows that 39% of the scanned websites do not follow the PDPL requirement of providing privacy policies, precluding users from knowing how their collected data will be handled and how they can exercise their rights under PDPL. In summary, our analysis highlights alarming practices that can potentially violate PDPL requirements.

show abstract

Arabic Privacy Policy Corpus and Classification

Cited by 2 publications

References 11 publications

A Bilingual Longitudinal Analysis of Privacy Policies Measuring the Impacts of the GDPR and the CCPA/CPRA

A Bilingual Longitudinal Analysis of Privacy Policies Measuring the Impacts of the GDPR and the CCPA/CPRA

Privacy practices of popular websites in Saudi Arabia

Contact Info

Product

Resources

About