diff --git a/principles/index.html b/principles/index.html index a6ccc93..2749284 100644 --- a/principles/index.html +++ b/principles/index.html @@ -117,7 +117,7 @@
Users should be able to learn what measurements they may participate in.
Users should be able to learn what level of risk of re-identification or cross-context data-sharing is possible.
-
See also: comprehensibility.
Users cannot be expected to understand the details of the process by which their privacy is protected, the mathematical guarantees of differential privacy, or similar concepts. However, users should still be able to see the implications of participation, including:
+Comprehensibility doesn't require that every user understands or has a correct mental model. An interested user should be able to learn enough to predict the implications such that they can make informed decisions about participation.
+Unlike even the interested user, reviewers should be able to understand the full spectrum of potential implications for different users and for the ecosystem as a whole. This requires explainability of the implications to non-expert but professionally engaged interested observers.
+
See also: accountability.