Beyond the Legal Lens: A Sociotechnical Taxonomy of Lived Privacy Incidents and Harms

📅 2025-11-25
📈 Citations: 0
Influential: 0
📄 PDF
🤖 AI Summary
Existing legal frameworks overemphasize tangible, quantifiable privacy harms while neglecting pervasive psychological, relational, and existential harms endemic to the digital age. Method: Drawing on qualitative content analysis of 369 publicly reported privacy incidents, this study develops the first empirically grounded, socio-technical taxonomy of privacy harms. Contribution/Results: The taxonomy reveals that over 70% of harms manifest as intangible consequences—including loss of psychological safety, chronic anxiety, erosion of trust, and self-censorship—rather than material loss. It transcends traditional tort-law paradigms by systematically mapping harm agents, motivations, and information-type patterns, demonstrating that privacy violations fundamentally entail the degradation of social relations and agentic subjectivity. This framework provides a human-centered theoretical foundation and an operational assessment tool for privacy governance, platform accountability, and legislative reform.

Technology Category

Application Category

📝 Abstract
To understand how privacy incidents lead to harms, HCI researchers have historically leveraged legal frameworks. However, these frameworks expect acute, tangible harms and thus may not cover the full range of human experience relevant to modern-day digital privacy. To address this gap, our research builds upon these existing frameworks to develop a more comprehensive representation of people's lived experiences with privacy harms. We analyzed 369 privacy incidents reported by individuals from the general public. We found a broader range of privacy incidents and harms than accounted for in existing legal frameworks. The majority of reported privacy harms were not based on tangible harm, but on fear and loss of psychological safety. We also characterize the actors, motives, and information associated with various incidents. This work contributes a new framework for understanding digital privacy harms that can be utilized both in research and practice.
Problem

Research questions and friction points this paper is trying to address.

Develops a sociotechnical taxonomy to classify real-world privacy incidents and harms
Addresses limitations of legal frameworks in capturing intangible psychological privacy harms
Analyzes 369 reported incidents to characterize actors, motives and information types
Innovation

Methods, ideas, or system contributions that make the work stand out.

Developed a sociotechnical taxonomy for privacy incidents
Analyzed 369 real-world privacy incidents from public
Characterized actors motives and information in incidents
🔎 Similar Papers
No similar papers found.
K
Kirsten Chapman
Brigham Young University, U.S.A
G
Garrett Smith
Brigham Young University, U.S.A
K
Kaitlyn Klabacka
Brigham Young University, U.S.A
H
Harrison Winslow
Brigham Young University, U.S.A
Louise Barkhuus
Louise Barkhuus
New York University, U.S.A
Cori Faklaris
Cori Faklaris
Software and Info. Systems, College of Computing and Informatics, Univ. of N. Carolina at Charlotte
Usable privacy and securitysocial computingUXpsychometricshuman-centered AI
Sauvik Das
Sauvik Das
Associate Professor, Carnegie Mellon University
Human-Computer InteractionPrivacySecurityUsable Privacy and Security
P
Pamela Wisniewski
International Computer Science Institute, U.S.A
B
Bart Piet Knijnenburg
Clemson University, U.S.A
H
Heather Lipford
University of North Carolina at Charlotte, U.S.A
X
Xinru Page
Brigham Young University, U.S.A