User-Centered Privacy Communication Design

In this paper, we describe a user-centered privacy policy design project that we undertook at Stanford Legal Design Lab, in order to generate new models of business-to-consumer communications around data privacy. From our preliminary user research, rapid prototyping and testing, and refinement of new privacy communication designs, focused on a very particular archetype—20-40 year old who is tech-savvy yet largely disinterested in privacy policies—we propose a series of new concept designs for technology companies to use when presenting the terms of their privacy policies, as well as general principles to ensure that communication of these policies are more engaging and actionable to this type of target user.