Visualising Personal Data Flows: Insights from a Case Study of Booking.com

Haiyue Yuan,Matthew Boakes,Xiao Ma,Dongmei Cao,Shujun Li
DOI: https://doi.org/10.1007/978-3-031-34674-3_7
2024-09-20
Abstract:Commercial organisations are holding and processing an ever-increasing amount of personal data. Policies and laws are continually changing to require these companies to be more transparent regarding the collection, storage, processing and sharing of this data. This paper reports our work of taking <a class="link-external link-http" href="http://Booking.com" rel="external noopener nofollow">this http URL</a> as a case study to visualise personal data flows extracted from their privacy policy. By showcasing how the company shares its consumers' personal data, we raise questions and extend discussions on the challenges and limitations of using privacy policies to inform online users about the true scale and the landscape of personal data flows. This case study can inform us about future research on more data flow-oriented privacy policy analysis and on the construction of a more comprehensive ontology on personal data flows in complicated business ecosystems.
Cryptography and Security,Information Retrieval
What problem does this paper attempt to address?