diff --git a/principles/index.html b/principles/index.html index a6ccc93..2749284 100644 --- a/principles/index.html +++ b/principles/index.html @@ -117,7 +117,7 @@

Users should be able to investigate how data about them is used and shared.<

Users should be able to learn what measurements they may participate in.

Users should be able to learn what level of risk of re-identification or cross-context data-sharing is possible. -
See also: comprehensibility.

+
See also: comprehensibility.

Researchers, regulators and auditors should be able to investigate how a system is used and whether abuse is occurring.

@@ -133,6 +133,25 @@

Researchers, regulators and auditors should be able to investigate how a sys

When abuse happens, there must be a mechanism to identify the abuse, limit further access and enable consequences.

+
+

Comprehensibility

+
+

Users should be able to understand the implications of their participation in advertising systems.

+

Users cannot be expected to understand the details of the process by which their privacy is protected, the mathematical guarantees of differential privacy, or similar concepts. However, users should still be able to see the implications of participation, including:

+
    +
  • the capabilities and what different advertising participants may learn about them;
  • +
  • the likely, and unlikely, risks, including identification, disclosure and manipulation; and,
  • +
  • whom they are trusting to protect their privacy.
  • +
+

Comprehensibility doesn't require that every user understands or has a correct mental model. An interested user should be able to learn enough to predict the implications such that they can make informed decisions about participation.

+
+
+

Reviewers, researchers, and policymakers should be able to understand the implications of advertising systems on users, websites, and advertisers.

+

Unlike even the interested user, reviewers should be able to understand the full spectrum of potential implications for different users and for the ecosystem as a whole. This requires explainability of the implications to non-expert but professionally engaged interested observers. +
See also: accountability.

+

+
+