Internet Banking: The Case of Data Privacy Policies

• Andrea Gnecco Pontifical Catholic University of Rio Grande do Sul
• Daniel dos Santos Krug Pontifical Catholic University of Rio Grande do Sul
• Ana Carla Gomes da Silva Pontifical Catholic University of Rio Grande do Sul
• Nayara Silva das Neves Pontifical Catholic University of Rio Grande do Sul
• Afonso Sales Pontifical Catholic University of Rio Grande do Sul
• Milene Selbach Silveira Pontifical Catholic University of Rio Grande do Sul

DOI: https://doi.org/10.5753/ihc_estendido.2022.224879

Abstract

Data privacy issues have become increasingly important since the Brazilian General Personal Data Protection Law, in 2020. In an attempt to address this problem from a Human-Computer Interaction perspective, we conducted a heuristic evaluation and a series of user interviews to understand how two Brazilian internet banking platforms structure their privacy policy interfaces. The results showed that the interface that presented a simpler architecture had a better heuristic evaluation and the users interviewed prefer an interface with shorter texts, illustrations, and internal links, even though those might add complexity. In order to generate a solution through these outputs, we suggest the creation and the use of interaction design patterns that applies good usability principles.

Keywords: heuristic evaluation, interview, privacy policies, internet banking

References

Andrews, V. (2019). Analyzing awareness on data privacy. In Proceedings of the 2019 ACM Southeast Conference, ACM SE ’19, page 198–201, New York, NY, USA. Association for Computing Machinery

Barbosa, S. D. J., Silva, B. S. d., Silveira, M. S., Gasparini, I., Darin, T., and Barbosa, G. D. J. (2021). Interação Humano-Computador e Experiência do Usúario.

Brasil (2018). Lei nº 13.709, de 14 de agosto de 2018 - lei geral de proteção de dados pessoais.

Castro, E. T. V. d., Silva, G. R. S., and Canedo, E. D. (2022). Ensuring privacy in the application of the brazilian general data protection law (lgpd). In Proceedings of the 37th ACM/SIGAPP Symposium on Applied Computing, SAC ’22, page 1228–1235, New York, NY, USA. Association for Computing Machinery.

European Parlament, T. C. (2016). General data protection regulation.

Nielsen, J. (1994). Enhancing the explanatory power of usability heuristics. In Conference Companion on Human Factors in Computing Systems, CHI ’94, page 210, New York, NY, USA. Association for Computing Machinery.

Nielsen, J. and Molich, R. (1990). Heuristic evaluation of user interfaces. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, CHI ’90, page 249–256, New York, NY, USA. Association for Computing Machinery.

Ribeiro, R. C. and Canedo, E. D. (2020). Using mcda for selecting criteria of lgpd compliant personal data security. In The 21st Annual International Conference on Digital Government Research, dg.o ’20, page 175–184, New York, NY, USA. Association for Computing Machinery.

Silva, E., Torres, B., Sacramento, C., Capra, E. P., Ferreira, S. B. L., and Garcia, A. C. B. (2018). Privacy: What is the research scenario in brazilian symposium ihc? In Proceedings of the 17th Brazilian Symposium on Human Factors in Computing Systems, IHC 2018, New York, NY, USA. Association for Computing Machinery.

Thornburg, H. (2020). 10 usability heuristics for user interface design.