Rethinking Data Minimization from a User-Centered Approach: A Paradigm Shift

Tuesday, September 12, 2023 - 8:45 am9:00 am

Tanusree Sharma, University of Illinois at Urbana Champaign

Abstract: 

Data minimization is a legal and privacy-by-design principle mandating that online services collect only data that is necessary for pre-specified purposes. In traditional system-based approaches that attribute the sole responsibility for data minimization to service providers, it becomes vital to involve users in shaping the appropriate data compliance practices.

In this talk, I will talk about (a) current misunderstandings regarding data minimization among users, (b) surfaces how users reason about the necessity of data in relation to search result quality, and (c) impact of factors on user decision-making with regards to data minimization. The goal is to design actionable mechanisms that provide users with greater agency over their data through user-controlled data minimization.

Tanusree Sharma, University of Illinois at Urbana Champaign

Tanusree Sharma is a Ph.D. candidate in Informatics at the University of Illinois at Urbana Champaign. She works at the intersection of usable security and privacy and decentralized governance. Her research involves designing and developing frameworks and toolings to address issues around power dynamics, deliberative democracy, and transparency in emerging and complex socio-technical systems (DeFi, AI). She previously worked as a privacy engineer intern at Google and a research intern at Max Planck Institute for Security and Privacy.

BibTeX
@conference {290835,
author = {Tanusree Sharma},
title = {Rethinking Data Minimization from a {User-Centered} Approach: A Paradigm Shift},
year = {2023},
address = {Santa Clara, CA},
publisher = {USENIX Association},
month = sep
}

Presentation Video