Kevin Litman-Navarro, writing for the Times, analyzed dozens of privacy policies online for readability and brevity. The situation is grim:
The vast majority of these privacy policies exceed the college reading level. And according to the most recent literacy survey conducted by the National Center for Education Statistics, over half of Americans may struggle to comprehend dense, lengthy texts. That means a significant chunk of the data collection economy is based on consenting to complicated documents that many Americans can’t understand.
Despite efforts like the General Data Protection Regulation to make policies more accessible, there seems to be an intractable tradeoff between a policy’s readability and length. Even policies that are shorter and easier to read can be impenetrable, given the amount of background knowledge required to understand how things like cookies and IP addresses play a role in data collection.
“You’re confused into thinking these are there to inform users, as opposed to protect companies,” said Albert Gidari, the consulting director of privacy at the Stanford Center for Internet and Society.
As data collection practices become more sophisticated (and invasive), it’s unlikely that privacy policies will become any easier to comprehend. And if states continue to draft their own data protection laws, as California is doing with its Consumer Privacy Act, privacy policies could balloon with location-specific addendums.
Litman-Navarro called out the BBC for its readable, short policy that explains to normal people exactly how the Beeb will use their data. He also called out AirBnB for the opposite: a lawyerly document of incredible length that tells users nothing.
Here at the Daily Parker, we only collect your personal information (specifically, your email address and name) if you give it to us through the Comment form, and we don't show your email address to anyone. Sometimes we will use it to get in touch with you directly about a comment you've left. Otherwise we treat it as we treat our own private information. Clear?