Collaborative Research: SaTC: CORE: Small: Empathy-Based Privacy Education and Design through Synthetic Persona Data Generation

Privacy is often perceived as an abstract concept by both internet users and software developers. When users are engaged in online activities, it is difficult for them to make informed decisions about their personal data due to the challenges they face in understanding and experiencing the privacy implications of their behaviors in advance. Similarly, many software developers lack the ability to comprehend how the data practices of their applications may impact user privacy and to implement proper data practices that conform to users’ privacy expectations. This project is tackling this problem by developing a new, empathy-based framework to enhance privacy education and design. The project team is using generative AI to create synthetic personas with AI-generated personal data. Using the personas, the team is designing, creating, and studying new interactive sandboxes and developer tools that allow individuals to empathize with these personas, leading to a more concrete and situated understanding of privacy. This understanding, in turn, fosters positive privacy-oriented behaviors among internet users and privacy-responsible software development practices among software developers. To enhance users’ privacy knowledge and developers’ privacy-responsible software development practices, the project is systematically studying the mechanisms and applications of empathy invocation in the context of privacy. The goal is to develop metrics, guidelines, and conceptual frameworks for empathy-based approaches that foster privacy and security in cyberspace. Using these findings, the project team is employing user-centered design methods to develop: 1) systems that invoke empathy to improve users’ privacy literacy and decision-making; and 2) empathy-based developer tools that support developers to proactively identify and address diverse privacy needs of users at the early stages of the development life cycle. These systems are deployed in outreach events to promote privacy literacy in under-resourced user and developer communities. Additionally, they are incorporated into college-level privacy literacy educational modules to support hands-on experiential learning. This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.