PET-CON, the Privacy Enhancing Technologies Convention, is a forum for researchers, students, developers, and other interested people to discuss novel research, current development and techniques in the area of Privacy Enhancing Technologies. PET-CON was first conceived in June 2007 at the 7th International PET Symposium in Ottawa, Canada. The idea was to set up a bi-annual convention in or nearby Germany to be able to meet more often than only once a year at some major conference.

Smartwatches can collect health data, location data and other sensitive information about users, and privacy concerns arise. This thesis aimed to investigate how older people (50-80 years old) in Sweden behave when it comes to privacy and health data. The data were analyzed according to the privacy paradox, which describes the discrepancy between how people behave and how they intend to behave in relation to risk and trust. The research approach was qualitative, and twelve semi-structured interviews were conducted. The interviews were coded and thematized following the chosen theory. Among the twelve participants in the study, a majority did not see, understand, or behave consciously towards the risks of sharing health data. Instead, trust was related to both the disclosure behavior and the intentional behavior among several of the participants in this study. This study indicates that for some of the participants, there are also other factors that determine their behavior, and the privacy paradox alone is not complete. Four of the findings when it comes to participants' behavior towards their health data and privacy were: trust-based decisions, lack of knowledge, low value of personal data, and value benefits more than privacy. Among several of the participants in this study, when trust towards an actor increase, the participant’s risk awareness decreases. It can be discussed whether the participants in the study value the opportunities more than the risks, and this impacts their behavior. Most of the participants think that sharing location data infringes more on their privacy than sharing health data, and self-education might be a reason the behavior and the level of privacy differ among the participants.

Purpose: The purpose of this study is to contribute with a cross-country approach to the research about consumers’ online privacy concerns by investigating Greek and Swedish consumers’ privacy attitudes and behaviours in the digital marketplace. Theoretical framework: The study’s theoretical framework is based on the Power-Responsibility Equilibrium Theory (PRE) perspective and three of Hoftsede’s cultural dimensions; uncertainty avoidance, power distance, and individualism. Methodology: The study has a deductive approach with a quantitative research method. The data was collected by a questionnaire in each country which resulted in 232 answers in total. The answers were then analyzed in Microsoft Excel 16.41, SPSS 26.0, and SmartPLS 3.3.3. Findings: Findings indicate that the impact of power-holders on consumer privacy concerns, privacy empowerment and trust is more prominent for Swedish than for Greek consumers. Moreover, the impacts of privacy concerns, privacy empowerment and trust on consumers’ power-balancing strategies are more substantial for Greek than for Swedish consumers. Implications: The study contributes to the marketing field and academics studying consumers’ behaviour as it adds a cross-cultural approach to the investigation of consumers’attitudes on e-commerce from a PRE theory perspective. Additionally, they can have practical implications for marketers and policymakers in the e-commerce sector as they can gain some insight into how essential corporate privacy responsibility and regulations are to gain the trust of consumers and decrease their privacy concerns. Limitations: Since the study covers Greek and Swedish consumers, it is limited to countries with similar characteristics. Moreover, the majority of the respondents were under 35 years old and their opinions contradicted, not allowing most of the effects to be statistically significant enough to be considered. Originality/Value: Consumer privacy attitudes and behaviours on e-commerce have not been studied from both a power-responsibility equilibrium and a cultural dimensions perspective. This study adds a cross-country approach by studying Greek and Swedish consumers, while at the same time combining two theoretical perspectives.

Denna studie handlar om studenters kännedom om de personliga uppgifter som lagras av institutioner inom högre utbildning, och om det finns skillnader mellan kön gällande kännedomen och hanteringen av dessa uppgifter. Då det i samband med den expanderande lagringen av data och användningen av den genom Big data inom organisationen, visat sig ha påverkan på den personliga integriteten. Tidigare forskning indikerar på att det finns en brist i kännedomen och hanteringen hos människor om vad som lagras av organisationer. Tidigare forskning har även indikerat på att det finns skillnader mellan kön i hanteringen och kännedomen om personliga uppgifter som lagras av organisationer. Denna studien avgränsar sig till studenternas kännedom om vad institutioner inom högre utbildning lagrar om dem och skillnader mellan kön angående dessa uppgifter. För denna studie har en forskningsmetod i form av elektroniska enkäter använts, där studenter fått redogöra för deras kännedom och tankar av institutioner inom högre utbildnings lagring och hantering av personliga uppgifter. Syftet var att undersöka vilken kännedom dessa har om de personliga uppgifter som lagras av organisationer och vilken insikt de har om hur de kan användas. Totalt har 151 deltagit i enkätundersökningen där 126 uppgett att de varit studenter. Metoden som använts för studien är en kvantitativ ansats med kvalitativa inslag, där den kvalitativa delen avser de frågor som besvarats i fri text. Vidare är den kvantitativa delen för de frågor som har analyserats genom statistik och siffror. Frågorna från den använda forskningsmetoden i denna studie i form av elektroniska enkäter har bearbetats och slutligen presenterats. Under teoriavsnittet redogörs de begrepp som använts i studien, samt en mer ingående redogörelse för integritetens betydelse vid lagring av data. Vidare analyseras resultatet från studien utifrån Petronios CPM-teori och dess fem principer med hänsyn till den personliga integriteten. Arbetet konkluderades med en slutsats om att studenter har en vag form av kännedom gällande de uppgifter som lagras av institutioner inom högre utbildning. Det visade sig att studenter inte upplever att deras kännedom är tillräcklig. Till följd av att de inte upplever att de får tillräcklig med information av institutioner inom högre utbildning. Resultatet från studien visade att studenter hade kännedom om begrepp kopplade till lagring av personliga uppgifter. Det visade sig att det finns skillnader mellan kön i hanteringen av personliga uppgifter, men till följd av avsaknaden av bortfallsanalysen var dessa fynd svårt att verifiera fullt ut. Resultatet indikerade på att ett flertal studenter inte kände sig trygga när institutioner inom högre utbildning samlade information om dem. På grund av att de inte hade kännedom om vad som lagrades. Dock visade resultatet att de flesta tycker att skolan borde ge tydligare information om de personliga uppgifterna som lagras. Vilket i sin tur gjorde att flera kände att de förlorade kontroll över den personliga integriteten. Detta gällande de åsikter om hur tydliga de anser att institutioner inom högre utbildning är vid informering av personliga uppgifter som de lagrar. / This research study examines students' knowledge of personal data stored by institutions of higher education as well as, whether there are differences between the genders regarding the knowledge and the management of this stored data. This is connected to the expanding storage of data and the use of it through Big data within the organisations where it was shown to have impact on the personal integrity. Previous studies report that there is a knowledge gap within society regarding the information on what is stored. In addition to this, research showed that there are differences between genders about the knowledge and control of their personal data. Therefore, this study focuses on students' knowledge of what higher education institutions store about them as well as whether there are differences between genders. This study applies a quantitative research method in the form of electronic questionnaires for data collection. These questionnaires were handed out to students which contained questions about students' knowledge and views about their institution's storage and management of their personal data. A total of 151 people participated in this study, where 126 of the participants stated that they were students. Moreover. this study includes some elements of qualitative research methods where some of the questions in the electronic questionnaires could be answered in free text. The qualitative and quantitative methods were later analyzed and compared to Petrionio's CPM-theory and its five principles regarding the personal integrity. The result of the study showed that students' have a vague form of knowledge regarding the data stored by institutions of higher education. The research also indicated that there are differences between the sexes in the handling of personal data. However, our findings show that the lack of dropout analysis makes the mentioned findings quite difficult to be fully verified. The result has shown that several students did not feel secure when organizations within higher educational institutions stored personal data about them. This is because they feel that their knowledge on what is being stored is insufficient which consequently led them to feel a lacking control about their own personal integrity. Thus, results showed that most people think that the educational institutions should provide more specific information about the personal data that they store about them.

Vi lever idag i ett samhälle där stora delar av den sociala kontakt vi harmed andra personer sker via sociala plattformar. På dessa plattformarlagras det otroliga mängder information om oss som användare. De vetvar vi befinner oss, våra intressen, vem vi tycker om att umgås med ochofantligt mycket mer. Vi har genom den här studien tagit reda på omattityden kring integritet och informationshantering på socialaplattformar påverkar kontinuitet i användandet av Facebook. Studiensdatainsamling har genomförts med en blandning av fokusgrupper, enintervju och enkäter. Resultatet visar att attityderna hos användarna serolika ut men att detta i större utsträckning inte påverkar användandet.Användandet sker mer av vana och är någonting som är inmatat i vårtbeteende och framförallt någonting som underlättar det vardagliga livet. / We live today in a society where large parts of the social interactions wehave with other people are done through social platforms. Theseplatforms keep an incredible amount of information about us as users.They know where we are, what our interests are, who we like to hangout with and much more. Through this study, we have identified whetherthe attitude towards privacy and information management on socialplatforms leads to another way of using these platforms. The datacollection of the study has been conducted with a mix of focus groups,interview and questionnaires. The result shows that the attitudes of userslook different but that this does not affect the use of social platforms toa greater extent. The use is more of a routine and something that isincluded in our behavior and, above all, something that facilitateseveryday life.

The purpose of the study was to determine how the Fourth Amendment is treated in the age of the internet. To determine the degree of the significance of this relationship a comparative approach is used. Court opinions from cases involving other technological innovations and the Fourth Amendment were examined and their reasoning was compared to that of cases involving the internet and the Fourth Amendment. The results indicated that contrary to some fears that the internet would require a different approach with respect to the law it actually did not present many novel barriers to its application. The principle conclusion was that the reasoning used in cases involving older technologies, namely the test outlined in Katz v. United States, was consistently applied even in the age of the internet.

Today we are surrounded by IOT devices that constantly generate different kinds of data about its environment and its users. Much of this data could be useful for different research purposes and development, but a lot of this collected data is privacy-sensitive for the individual person. To protect the individual's privacy, we have data protection laws. But these restrictions by laws also dramatically reduce the amount of data available for research and development. Therefore it would be beneficial if we could find a work around that respects people's privacy without breaking the laws while still maintaining the usefulness of data. The purpose of this thesis is to show how we can generate privacy-aware data from a dataset by using Generative Adversarial Networks (GANS) and Differential Privacy (DP), that maintains data utility. This is useful because it allows for the sharing of privacy-preserving data, so that the data can be used in research and development with concern for privacy. GANS is used for generating synthetic data. DP is an anonymization technique of data. With the combination of these two techniques, we generate synthetic-privacy-aware data from an existing open-source Fitbit dataset. The specific type of GANS model that is used is called CTGAN and differential privacy is achieved with the help of gaussian noise. The results from the experiments performed show many similarities between the original dataset and the experimental datasets. The experiments performed very well at the Kolmogorov Smirnov test, with the lowest P-value of all experiments sitting at 0.92. The conclusion that is drawn is that this is another promising methodology for creating privacy-aware-synthetic data, that maintains reasonable data utility while still utilizing DP techniques to achieve data privacy.

No description available.

The Internet of Things (IoT) is one of the most rapidly evolving technologies aroundthe globe that has changed the way people live due to the benefits that comes with itsadoption. However, they have been associated with privacy and security risks. Witha focus on technical mechanisms and a lack of attention to consumer concerns over along time, it is unsurprising that manufacturers lack an understanding of consumersecurity and privacy concerns. While there has been significant empirical researchwarranting consumer concerns, their perceptions remain afoot.The purpose of this study is to understand the consumer privacy and securityperceptions associated with adoption of IoT devices within a smart home. Without an understanding of the consumer perceptions on privacy and security issues, manu-facturers may not address these issues which may hinder the adoption of IoT. While a significant number of studies have shown the privacy and security issues surrounding IoT devices, they have only extended to technical issues, mostly from the manufac-turer’s perspective. Since security is a complex issue involving several stakeholders, these studies cannot be applied from a consumer perspective.In this study we adopt an interpretive philosophical orientation and a qualitativeapproach. In depth interviews are used to collect data from smart homeowners,investigating their perceptions of smart home privacy issues. We have identified threesignificant recurring themes that need to be addressed: ethical and regulatory issues,information control and ownership, and technology design issues.

Smart environments, particularly smart homes have become an increasingly popular topic for research and real world implementations. Despite the popularity of this topic, there is a lack of tools to enable inhabitants of smart environments to perceive which kind of data smart devices generate and to make inhabitants aware of who is accessing their personal information and the purpose for accessing this information. These issues have caused privacy concerns among inhabitants of smart environments – who would like to ensure their personal information is only utilized for their benefits, rather than being used for malicious purposes. Therefore, smart home environments motivate the need for privacy awareness tools to help inhabitants to better understand the privacy implications when their personal information is misused. To address this problem, this thesis suggests guidelines for the design of privacy awareness tools. A literature review evaluated instruments to conduct research about privacy concerns. The Internet Users’ Information Privacy Concerns (IUIPC) framework from Malhotra, Kim, and Agarwal was selected for the empirical part of this thesis project because it is one of the most reliable models developed to measure privacy concerns at the individual level. Quantitative data was gathered through a survey based on this framework. Data collected from 30 experts in the field of study was analyzed using linear regression analysis techniques and principal component analysis. These survey results lead to a set of guidelines that could guide designers and service providers as to what aspects of privacy concerns they should consider and what they should concentrate on when designing privacy awareness tools for ubiquitous computing systems, such as a smart home. / Intelligenta omgivningar och framförallt smarta hem har kommit att bli ett popular forskning samt impementationsområde. Trots ämnets popularitet är det en brist på verktyg som låter personer i dessa intelligenta omgivningar att förstå vilken typ av data som genereras av de smarta apparaterna, att de förstår vem som får tillgång till deras privatinformation och syftet till att informationen används. Dessa problem leder till påverkar användarintegriteten för personerna i de intelligenta omgivningarna. Personerna vill försäkra sig om att deras privatinformation används till deras fördel och inte missbrukas. Det finns ett behov av integretetsverktyg som kan hjälpa personerna att få en bättre förståelse över hur deras integritet påverkas när deras privatinformation missbrukas. Den här rapporten syftar till att behandla detta problem genom att ta fram riktlinjer baserade på användarnas oro kring deras integritet. En litteraturstudie genomfördes för att utvärderade metoder för att genomföra forskning på användarintegritet. Ramverket Internet Users’ Information Privacy Concerns (IUIPC) från Malhotra, Kim, och Agarwal valdes eftersom det var den en av de mest pålitliga modellen för att mäta den individuella oron kring integriteten hos användarna. Kvantitativ data samlades in genom ett formulär baserat på IUIPC ramverket. Datan samlades in under den empiriska fasen utav 30 experter inom forskningsområdet. Linjär regression och principalkomponentanalys användes för att analysera datan från undersökningen. Resultatet från undersökningen diskuterades med målet att tillhandahålla riktlinjer till utvecklare och tjänsteleverantörer, om vilka integritets aspecter vilket bör övervägas samt focusera på vid utveckling av integretetsverktyg för ubika datasystem.