This article presents an experimental study of privacy-related attitudes and behaviors regarding a music recommender service based on two types of user modeling: personality traits and musical preferences. Contrary to prior expectations and attitudes reported by participants, personality traits are frequently disclosed to the system and other users, indicating that embedded modeling of user personality does not represent an acceptance barrier. Discrepancies between privacy attitudes and behaviors have been reported before in the context of e-commerce applications, but the corresponding studies could not exclude several conflicting hypotheses, such as participants expressing attitudes outside the context of specific privacy dilemmas and contact with researchers, which may have mitigated perceived privacy risks. Arguably, these are fundamental problems in empirical investigations into privacy that apply to most published works relating to privacy and user modeling. Measures to control these factors in this study are discussed, and methodological suggestions for future research are presented.
Aarts, E., Harwig, H., & Schuurmans, M. (2001). Ambient Intelligence. In J. Denning (Ed.), The invisible future (pp. 235-250). New York: McGraw-Hill .
2.
Ackerman, M.S., Cranor, L.F., & Reagle, J. (1999, November). Privacy in e-commerce: Examining user scenarios and privacy preferences. In Proceedings of the 1st ACM conference on electronic commerce EC `99 (pp. 1-8). New York : ACM Press.
3.
Acquisti, A. (2004). Privacy in electronic commerce and the economics of immediate gratification. In Proceedings of the 5th ACM conference on electronic commerce EC `04 (pp. 21-29). New York: ACM Press.
4.
Adams, A., & Sasse, M.A. (2001). Privacy in multimedia communications: Protecting users, not just data. In A. Blandford, J. Vanderdonckt, & P. Gray (Eds.), People and computers XV: Interaction without frontiers. Joint proceedings of HCI2001 and IHM2001 (pp. 49-64). London : Springer-Verlag.
5.
Ajzen, I., & Fishbein, M. (2005). The influence of attitudes on behavior. In D. Albarracín, B. T. Johnson, & M. P. Zanna (Eds.), The handbook of attitudes (pp. 173-221). London: Lawrence Erlbaum.
6.
Altman, I. (1975). The environment and social behavior: Privacy, personal space, territory, crowding. Monterey, CA: Brooks/Cole .
7.
Bellotti, V., & Sellen, A. (1993). Design for privacy in ubiquitous computing environments . In G. De Michelis & C. Simone (Eds.), Proceedings of the third European conference on computer supported cooperative work ECSCW'93 (pp. 77-86). Dordrecht, the Netherlands: Kluwer Academic Publishers .
8.
Berendt, B., Günther, O., & Spiekermann, S. (2005). Privacy in e-commerce: Stated preferences vs. actual behavior. Communications of theACM, 48(4), 101-106.
9.
Chellappa, R.K., & Sin, R.G. (2005). Personalization versus privacy: An empirical examination of the online consumer's dilemma. Information Technology and Management, 6(2-3), 181-202.
10.
Chignell, M.H., Quan-Haase, A., & Gwizdka, J. (2003). The Privacy Attitude Questionnaire (PAQ): Initial development and validation. In Proceedings of the Human Factors and Ergonomics Society 47th annual meeting (pp. 1326-1330). Santa Monica, CA: Human Factors and Ergonomics Society .
11.
Child, I.L. (1968). Personality in culture. In E. F. Borgatta & W. W. Lambert (Eds.), Handbook of personality theory and research (pp. 82-145). Chicago : Rand McNally.
12.
Clarke, R. (1999). Internet privacy concerns confirm the case for intervention. Communications of theACM, 42(2), 60-67.
13.
Consolvo, S., Smith, I.E., Matthews, T., LaMarca, A., Tabert, J., & Powledge, P. (2005). Location disclosure to social relations: Why, when & what people want to share. In Proceedings of the SIGCHI conference on human factors in computing systems CHI '05 (pp. 81-90). New York: ACM Press
14.
Cranor, L.F. (2004). “I didn't buy it for myself”: Privacy and ecommerce personalization. In C.- M. Karat, J. O. Blom, & J. Karat (Eds.), Designing personalized user experiences in eCommerce (pp. 57-73). Norwell, MA: Kluwer Academic Publishers.
15.
Good, N.S., & Krekelberg, A. (2003). Usability and privacy: A study of KaZaA P2P file sharing. In Proceedings of the SIGCHI conference on human factors in computing systems CHI '03 (pp. 137-144). New York: ACM Press.
16.
Gosling, S.D., Rentfrow, P.J., & Swann, W.B., Jr. (2003). A very brief measure of the Big Five personality domains. Journal of Research in Personality , 37, 504-528.
17.
Günther, O., & Spiekermann, S. (2005). RFID and the perception of control: The consumer's view. Communications of theACM, 48(9), 73-76.
18.
Harris Interactive. (2002, February). Privacy on and off the internet: What consumers want (Study No. 15229). New York: Author. Retrieve January 10, 2007, from http://www.aicpa.org/download/webtrust/priv_rpt_21mar02.pdf
19.
Iachello, G., & Abowd, G.D. (2005). Privacy and proportionality: Adapting legal evaluation techniques to inform design in ubiquitous computing. In Proceedings of the SIGCHI conference on human factors in computing systems CHI `05 (pp. 91-100). New York: ACM Press .
20.
Kobsa, A. (2001). Generic user modeling systems. User Modeling and User-AdaptedInteraction, 11(1-2), 49-63.
21.
Kobsa, A. (2002). Personalized hypermedia and international privacy. Communications of theACM, 45(5), 64-67.
22.
Kobsa, A., & Schreck, J. (2003). Privacy through pseudonymity in user-adaptive systems. ACM Transactions on Internet Technology, 3(2), 149-183.
23.
Langheinrich, M. (2002). A privacy awareness system for ubiquitous computing environments. In G. Borriello & L. E. Holmquist (Eds.), Proceedings ubicomp 2002 international conference on ubiquitous computing (pp. 237-245). Berlin/Heidelberg, Germany: Springer-Verlag.
24.
Langheinrich, M. (2005). Personal privacy in ubiquitous computing tools and system support. Unpublished doctoral dissertation, Swiss Federal Institute of Technology, Zurich, Germany.
25.
Lederer, S., Hong, J.I., Dey, A.K., & Landay, J.A. (2004). Personal privacy through understanding and action: Five pitfalls for designers. Personal and Ubiquitous Computing , 8(6), 440-454.
26.
Margulis, S. (2003). On the status and contribution of Westin's and Altman's theories of privacy. Journal of Social Issues, 59(2), 411-429.
27.
Milgram, S. (1974). Obedience to authority: An experimental view. New York: Harper and Row.
28.
Nguyen, D.H., & Mynatt, E.D. (2002, June). Privacy mirrors: Understanding and shaping socio-technical ubiquitous computing systems (Georgia Institute of Technology, Technical Report GIT-GVU-02-16). Retrieve January 10, 2007, from http://www.erstwhile.org/writings/PrivacyMirrors.pdf
29.
Olivero, N., & Lunt, P. (2004). Privacy versus willingness to disclose in e-commerce exchanges: The effect of risk awareness on the relative role of trust and control. Journal of Economic Psychology, 25(2), 243-262.
30.
Patil, S., Romero, N.A., & Karat, J. (2006). Privacy and HCI: Methodologies for studying privacy issues. In CHI `06 extended abstracts on human factors in computing systems (pp. 1719-1722). New York: ACM Press.
31.
Perik, E.M., de Ruyter, B.E.R., Markopoulos, P., & Eggen, J.H. (2004). The sensitivities of user profile information in music recommender systems. In Second annual conference on privacy, security and trust PST 2004 (pp. 137-141). Fredericton, New Brunswick, Canada: University of New Brunswick .
32.
Rentfrow, P.J., & Gosling, S.D. (2003). The do re mi's of everyday life: The structure and personality correlates of music preferences. Journal of Personality and Social Psychology, 84, 1236-1256.
33.
Romero, N.A., Perik, E.M., & Patil, S. (2005). Appropriate methodology for empirical studies of privacy. In M. F. Costabile & F. Paternò (Eds.), Proceedings human-computer interaction—INTERACT 2005 (pp. 87-89). Berlin /Heidelberg, Germany: Springer-Verlag .
34.
Spiekermann, S., Grossklags, J., & Berendt, B. (2001). E-privacy in 2nd generation e-commerce: Privacy preferences versus actual behavior. In Proceedings of the 3rd ACM conference on electronic commerce EC `01 (pp. 38-47). New York: ACM Press.
35.
Strauss, A., & Corbin, J. (1990). Basics of qualitative research: Grounded theory procedures and techniques. Newbury Park, CA: Sage.
36.
Teltzrow, M., & Kobsa, A. (2004). Impacts of user privacy preferences on personalized systems. In C.- M. Karat, J. O. Blom, & J. Karat (Eds.), Designing personalized user experiences in eCommerce (pp. 315-332). Norwell, MA: Kluwer Academic.
37.
W3C. (1998, July). P3P guiding principles: W3C NOTE 21 July 1998. Available at http://www.w3.org/TR/NOTE-P3P10-principles
38.
Westin, A.F. (1967). Privacy and freedom. New York : Atheneum.
