Data Protection at a Discount: Investigating the UX of Data Protection from User, Designer, and Business Leader Perspectives
George Chalhoub, Ivan Flechais
Abstract
Smart homes are dangerous -a sentiment arising from prior research exploring the user experience (UX) of data protection for smart home devices. While this research has explored data protection shortcomings for users, UX is a designed encounter reconciling development, economic, compliance and strategic business priorities. And so, in addition to studying user perspectives, there is a gap in understanding how designers and business leaders influence the UX of data protection. To address this gap, we study smart home users, designers and business leaders, exploring how they experience data protection interactions, regulation, and processes. Our findings confirm that users have poor data protection interactions (e.g., consent and data access requests). We also find that business leaders and designers experience difficulties in identifying, applying, and tailoring suitable processes and practices for data protection for which some have developed "discount data protection": shortcuts, heuristics, and common sense practices to overcome these challenges.
CCS Concepts: • Security and privacy → Privacy protections; Usability in security and privacy; • Human-centered computing → Empirical studies in HCI .
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 39cf89ee-afbc-41c5-bd82-16a39722d5f6Cited by top-tier papers3
- SoK: Technical Implementation and Human Impact of Internet Privacy RegulationsEleanor Birrell, Jay Rodolitz, Angel Ding, Jenna Lee et al.S&P 2024 · 11 citations
- "Innovative Technologies or Invasive Technologies?": Exploring Design Challenges of Privacy Protection With Smart Home in JordanWael S. Albayaydh, Ivan FlechaisCSCW 2024 · 6 citations
- "We Wanted to Do Better Than the Law": Exploring UI/UX Designers' Privacy Advocacy in PracticeKeyu Yao, Jinghui Cheng, Jin L.C. GuoCSCW 2026
Builds on6
- Dark Patterns after the GDPR: Scraping Consent Pop-ups and Demonstrating their InfluenceMidas Nouwens, Ilaria Liccardi, Michael Veale, David R. Karger et al.CHI 2020 · 491 citations
- (Un)informed Consent: Studying GDPR Consent Notices in the FieldChristine Utz, Martin Degeling, Sascha Fahl, Florian Schaub et al.CCS 2019 · 429 citations
- Rethinking Access Control and Authentication for the Home Internet of Things (IoT)Weijia He, Maximilian Golla, Roshni Padhi, Jordan Ofek et al.USENIX Security 2018 · 221 citations
- Understanding and Improving Security and Privacy in Multi-User Smart Homes: A Design Exploration and In-Home User StudyEric Zeng, Franziska RoesnerUSENIX Security 2019 · 190 citations
- Dark Patterns and the Legal Requirements of Consent Banners: An Interaction Criticism PerspectiveColin M. Gray, Cristiana Teixeira Santos, Nataliia Bielova, Michael Toth et al.CHI 2021 · 175 citations
Related papers
- User Perceptions and Experiences with Smart Home UpdatesJulie M. Haney, Susanne M. FurmanS&P 2023
- User-Centric Privacy Controls for Smart HomesChola Chhetri, Vivian Genaro MottiCSCW 2022 · 38 citations
- "It's the Company, the Government, You and I": User Perceptions of Responsibility for Smart Home Privacy and SecurityJulie M. Haney, Yasemin Acar, Susanne FurmanUSENIX Security 2021 · 49 citations
- Understanding User Privacy Concerns of Shared Smart TVsSynthia Qia Wang, Lan Gao, Marshini Chetty, Nick FeamsterCSCW 2025
- Privacy Perspectives and Practices of Chinese Smart Home Product TeamsShijing He, Yaxiong Lei, Xiao Zhan, Chi Zhang et al.S&P 2026 · 9 citations
