Now Available! Privacy Infrastructure for the Internet of Things

Our Privacy Infrastructure for the Internet of Things is now available. Use our IoT Portal to publicize the presence of IoT resources and their data practices, and use our IoT Assistant app to discover and control data collection around you (available both for iOS and Android phones). Check out our video and also CMU's CyLab press release.


SOUPS 2019 - Half a Day Tutorial - 9:00 AM to Noon, August 11th, 2019, Santa Clara, CA

Norman Sadeh, Helen Nissenbaum and Serge Egelman to give SOUPS tutorial on 'Contextual Integrity: From Theory to Practice'. This will include discussions of our research on user privacy preference and expectation modeling and privacy assistants. For more information, see our tutorial announcement here.

IAPP Global Privacy Forum

PI Sadeh and Cranor present their research at IAPP Global Privacy Forum, with PI Cranor focusing on "Designing Notice and Consent for IoT" and PI Sadeh presenting our project's Privacy Infrastructure for IoT and our work on Privacy Assistants.


Debating Ethics: Dignity and Respect in Data-Driven Life

Norman Sadeh to participate in a panel on Debating Ethics: Dignity and Respect in Data-Driven Life , at the 40th International Conference of Data Protection and Privacy Commissioners in Brussels, Belgium.

IPEN Privacy Engineering Workshop 2018

Peter Story presented our work on The Mobile App Privacy Compliance System at the IPEN Privacy Engineering Workshop in Barcelona, Spain.

SAC-PA2 Workshop

Dr. Norman Sadeh gave a keynote presentation on "Privacy in the Age of the Internet of Things" at the SAC-PA2 Workshop.

Annual Privacy Forum 2018

Peter Story presented our study of Google Play Store metadata, "Which Apps have Privacy Policies?", at the Annual Privacy Forum in Barcelona, Spain.

Panelists at IAPP

Lorrie Cranor and Norman Sadeh are panelists at IAPP’s Inaugural Privacy Engineering Section Forum at the IAPP Global Summit, Washington DC.

Presentation at FTC's Annual Privacy Conference

Our research group presents two papers and several posters at the FTC’s annual Privacy Conference. Panelists include Pardis Naeini for our work on capturing people's IoT privacy preferences and Norman Sadeh for our work on developing privacy assistants to help users keep up with the broad deployment of cameras and computer vision algorithms. Daniel Smullen will present a poster, titled "Personalized Privacy Assistant for IoT".


Hazim Almuhimedi receives his PhD

Graduate student, Hazim Almuhimedi, receives his PhD for his dissertation on “Helping Smartphone Users Manage their Privacy with Nudges“

Keynote at GDPR Privacy Engineering Workshop

Prof. Norman Sadeh delivers a keynote at workshop on Privacy Engineering Research and the GDPR: A Trans-Atlantic Initiative in Leuven, Belgium. Find the presentation materials here.

Panelist at Privacy + Security Forum

Norman Sadeh participated in the panel for “From Big Data, to Machine Learning, to AI” at the Privacy + Security Forum in Washington, DC

CDT on Connected Cars

The Center for Democracy and Technology (CDT) relies on results from our Mobile App Privacy Compliance tool in a study conducted to provide follow-up comments to the FTC/NHTSA workshop on Connected Cars

Best Paper and Distinguished Poster Award

SOUPS 2017

Consider registering for our SOUPS tutorial. We will cover new technologies, tools and findings coming out of our Usable Privacy Policy and Privacy Assistant projects.

Presentation of joint work with UCI at IoTCA

A paper on our collaboration with UCI on the deployment of our Privacy Assistant Infrastructure in UCI's Bren Hall was presented at IoT Computing and Applications Workshop.

PLSC 2017

Our work on "Mobile App Privacy Compliance: Automated Technology to Help Regulators, App Stores and Developers" will be presented at the Privacy Law Scholar Conference (PLSC) by Sebastian Zimmeck. The co-authors are Ziqi Wang, Lieyong Zou, Roger Iyengar, Bin Liu, Florian Schaub, Shomir Wilson, Norman Sadeh, Steven M. Bellovin, and Joel Reidenberg.

ConPro ’17

Invited presentation by Norman Sadeh on our research at FTC Technology and Consumer Protection Workshop (ConPro ’17) in San Jose (co-located with 38th IEEE Symposium on Security & Privacy).

Privacy Assistant Featured in MIT Technology review

Mobile App Compliance

Our mobile app privacy compliance work is featured on CyLab's website

More Coverage of Mobile Privacy Assistant

Our Mobile App Personalized Privacy Assistant received further coverage, including articles in the Boston Globe and the IAPP Dashboard.

News Coverage of Privacy Assistant Release

The launch of our Privacy Assistant for Mobile Apps is also getting some nice press coverage, including PC magazine and The Verge.

Privacy Assistant for Android released

Just released first version of our Privacy Assistant in Google Play store. For the time being, it’s only available for rooted Android phones. Hoping that over time we can make it available to everyone.

NDSS & PrivacyCon 2017

Our work on a mobile app privacy compliance tool was presented at the FTC PrivacyCon conference in January 2017 and a paper on the tool, including our collaboration with the California Office of the Attorney General has also been accepted for publication at NDSS 2017.


CMU Press Release About Mobile App Compliance

CMU press release on our mobile app compliance tool and our work with the California Office of the Attorney General features Sebastian Zimmeck and Norman Sadeh.

AAAI Privacy and Language Technology Symposium

Sebastian Zimmeck will present results on our Mobile App Privacy Compliance tool at the AAAI Privacy and Language Technology Symposium in DC. This is work funded under our NSF Frontier project on Usable Privacy Policy Project and our DARPA Bradeis Personalized Privacy Assistant Project.

Collaboration with California AG

The California AG's Office has been piloting our Mobile App Privacy Compliance tool for the past several months. See recent press release from the Cal AG's Office. This is work funded under our NSF Frontier project on Usable Privacy Policy Project and our DARPA Brandeis Personalized Privacy Assistant Project.

Featured in CIO Magazine

Our Privacy Assistant research is featured in CIO Magazine's article.

FTC Chairwoman Highlights our Project

FTC Chairwoman Edith Ramirez mentions our Personalized Privacy Assistant project in her keynote address at the Technology Policy Institute Aspen Forum.

Press Coverage

Our Personalized Privacy Assistant is featured on CMU’s home page and also in Tech Crunch and Science Daily.

IAPP SOUPS Privacy Award

Our article on Personalized Privacy Assistants for Mobile App Permissions, “Follow My Recommendations: A Personalized Assistant for Mobile App Permissions” received the IAPP SOUPS Privacy Award


Project members will present three papers at the Symposium on Usable Privacy and Security (SOUPS) in Denver, CO, at the end of June:

Expecting the Unexpected: Understanding Mismatched Privacy Expectations Online
A. Rao, F. Schaub, N. Sadeh, A. Acquisti, R. Kang,

How Short is Too Short? Implications of Length and Framing on the Effectiveness of Privacy Notices

J. Gluck, F. Schaub, A. Friedman, H. Habib, N. Sadeh, L. F. Cranor, Y. Agarwal

Follow My Recommendations: A Personalized Privacy Assistant for Mobile App Permissions

B. Liu, M. S. Andersen, F. Schaub, H. Almuhimedi, S. Zhang, N. Sadeh, Y. Agarwal, A. Acquisti

Expert address at Hong Kong University

Norman Sadeh delivers expert address on "Privacy in the Age of IoT: New Technologies for Users and Regulators at Hong Kong University

Privacy Risk Summit 2016

Florian Schaub speaks on "Designing Notice and Consent for the Internet of Things" at the Privacy Risk Summit 2016 in San Francisco.

Privacy Day

Privacy Day: “Celebrating Privacy Day at CMU: PI Sadeh and Cranor host Ed Felten, US Deputy Chief Technology Officer" – more details available here.

PPA at World Economic Forum

Lorrie Cranor presents our work on Personalized Privacy Assistants at Davos Conference. See the general video here and Lorrie's presentation.

Presentation at FTC

Norman Sadeh presents our research on Personalized Privacy Assistants at first FTC Privacy Conference ("Privacy Con") – see also here for an IAPP summary of the event highlighting our research.

Paper Selected by the Future of Privacy Forum

The paper "A Design Space for Effective Privacy Notices" (pdf) by Florian Schaub, Rebecca Balebako, Adam Durity and Lorrie Cranor has been selected by the Future of Privacy Forum as one of five Privacy Papers for Policymakers 2015.


Presentation at UCI

Norman Sadeh presents at UC Irvine’s Informatics Seminar: Notice and Choice for IoT: Why We Need Personalized Privacy Assistants.[slides]

Awarded DARPA Brandeis Grant

"Awarded DARPA Brandeis Grant to work on Personalized Privacy Assistants for the Internet of Things and Big Data": PIs: Norman Sadeh (Lead PI), Alessandro Acquisti, Lujo Bauer, Lorrie Cranor, and Anupam Datta. This projects involves a close collaboration with UC Irvine and Honeywell.

Awarded NSF SBE Grant

Sadeh, Cranor and Agarwal awarded National Science Foundation SBE grant to study Personalized Privacy Assistants for smartphone apps with a particular focus on user behavior and privacy decision making.

Received Google Research Award

Norman Sadeh is the recipient of a Summer 2015 Google Research Award for his work on learning people’s mobile app privacy preferences.

Organized Workshop at SOUPS

Acquisti and Sadeh are co-organizers of the 2nd annual workshop on Privacy Personas and Segmentation at SOUPS 2015.

Google Web of Things Expedition

Sadeh, Bauer and Cranor have been selected to lead the development of novel privacy technologies for Google’s new Web of Things initiative – see CMU press release and a few other articles in the press (e.g., Pittsburgh Post Gazette, Campus Technology )

Lots of Press Coverage

Nice article in the Wall Street Journal on our mobile app privacy research. The full study will be presented at CHI’2015 next month. Here’s also the CMU press release. Around 50 stories have been published in the past few days (including articles in the US, UK, Germany, France, India, Brazil, China, Vietnam, Netherlands and more). Here is the one in Wired and here’s a cool blog post in futurity that also talks about our work on personalized privacy assistants.