Today, we’re publishing a white paper that highlights the need for companies to better communicate privacy information by putting people at the center of privacy design decisions. If done well, we can empower everyone, regardless of literacy level or familiarity with technology, to make informed choices about how and when to share their data. But ensuring people understand their choices when it comes to data and privacy is something no individual company or government can solve alone. That’s why the paper also highlights the importance of collaboration among companies, policymakers and other experts.
There have been important improvements to privacy and data protection laws and regulations in recent years, like the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) that aim to make data practices more transparent. However, in order for people to understand what privacy policies actually mean, companies need to communicate data practices and user rights clearly and adapt policies for new technologies. That’s why we’ve called for robust privacy laws that require companies to clearly explain data practices and choices.
Building on our own work to iterate and improve how we communicate with people about privacy over the years, the paper we’re publishing today aims to identify some common challenges and complexities in getting this right, encourage more global conversations and collaboration on this topic, and propose some promising paths forward, including through design and policy co-creation.
Design: Through TTC Labs, a cross-industry effort founded and supported by Facebook, we’re working with a range of experts and companies to develop creative design solutions to better inform people about their data and privacy choices. The best solutions — the ones that are clearest for people and most comprehensive — are born out of collaboration among experts in policy, privacy and technology. That’s why TTC Labs hosts one-day workshops called Design Jams that bring together designers, developers, privacy experts and regulators to share ideas and create digital privacy notice prototypes that will be easy for people to navigate and understand.
TTC Labs is also developing a series of new interactive, educational web pages called Lenses that explain privacy and data concepts in an approachable and engaging way. Today, we’re sharing the first Lens, Designing Transparency For All, that highlights some of the key considerations in designing for transparency in a way that’s easy for people to understand. The Lens also links to relevant material from the TTC Labs website including practical examples and alternative ways of addressing these issues. Sample design patterns, blogs from international thought leaders, and free transparency design and group work tools can also be accessed through the Lens. This is the first in a series of Lenses which explain design concepts and how they can improve people’s experience with data online. Upcoming Lenses will address issues such as empowering people through controls and leveraging context in design.
Policy co-creation: We’ll continue working with regulators, policymakers, companies and other experts to ensure people are well-informed about data and privacy choices. And we’ll explore new ways to hold companies, including Facebook, accountable for communicating these clearly. We believe that if we grapple with these complex issues now, we can help improve future regulation and make it easier for people to understand and manage their data.
In the coming months, we’ll host a series of virtual consultations with experts on this topic. Through research, discussion and debate, we’ll explore areas that require more attention and surface new solutions that we intend to apply to our own practices here at Facebook.