Arthur Borem, University of Chicago
The GDPR and US state privacy laws have strengthened data subjects' right to access personal data collected by companies. However, the data exports companies provide consumers in response to Data Subject Access Requests (DSARs) can be overwhelming and hard to understand. To identify directions for improving the user experience of data exports, we conducted focus groups/codesign sessions, ran a quantitative online survey, and collected over 800 de-identified files from volunteers' data exports. We found that users were overwhelmed by and unable to decipher the dozens and sometimes hundreds of record types in their data and wished to enact other data subject rights (primarily that of deletion) while exploring their data.
This talk will discuss work co-authored by Arthur Borem, Elleen Pan, Olufunmilola Obielodan, Aurelie Roubinowitz, Luca Dovichi, Sophie Veys, Daniel Serrano, Madison Stamos, Margot Herman, Nathan Reitinger, Michelle L. Mazurek, and Blase Ur.
Arthur Borem, University of Chicago
Arthur Borem is a PhD student in Computer Science at the University of Chicago advised by Blase Ur. His work focuses on the privacy and security implications arising from the large-scale collection and use of personal data by online platforms. In particular, he's exploring and designing strategies and tools for implementing data subject rights guaranteed by the GDPR and other privacy regulations that more effectively promote user autonomy and platform transparency. Arthur has a BS in Computer Science from Brown University and before starting his PhD he was a software engineer at Asana.
author = {Arthur Borem},
title = {Designing a Data Subject Access Rights Tool},
year = {2024},
address = {Santa Clara, CA},
publisher = {USENIX Association},
month = jun
}