Privacy policy rating system
A system includes a processor and a memory accessible to the processor. The memory stores instructions that, when executed by the processor, cause the processor to determine a privacy policy score for one of an application and a website and provide the privacy policy score to a device.
1. A system comprising:
a privacy policy analysis system (PPAS) and a user device, the user device for communicating with websites, wherein each of the PPAS and the user device include:
a processor;
a memory accessible to the processor and storing instructions that, when executed-by the processor, cause the processor to:
automatically determine, at the PPAS, a privacy policy score for a website based on an automatic semantic analysis of text of a privacy policy associated with the website by retrieving the privacy policy score from a database;
receive at the PPAS, from a user at the user device, user preferences that reflect the relative importance of each of one or more privacy policy characteristics to that user;
customize, at the PPAS, the privacy policy score based on the user preferences of that user;
provide, at the PPAS, the privacy policy score to a privacy policy plugin associated with an Internet browser application executing on the user device;
display, at the user device, the privacy policy score within a browser window of the Internet browser application;
block, at the user device, access to the website by the privacy policy plugin associated with the Internet browser application, when the privacy policy score falls below a threshold value; and
survey a plurality of users for receiving, at the PPAS from the plurality of users, user preferences reflecting the relative importance of one or more of the privacy policy characteristics to the plurality of users;
wherein the user preferences received from the plurality of users, are combined to produce a weighting factor for the one or more privacy policy characteristics, in determining the privacy policy score.
2. The system of claim 1 , wherein, prior to determining the privacy policy score, the instructions further cause the processor at the PPAS to:
receive a website address from the device;
search a privacy policy database for the website address; and
when the website address is present in the privacy policy database, retrieve the privacy policy score from the privacy policy database.
3. The system of claim 2 , wherein, when the website address is not present, the instructions further cause the processor at the PPAS to:
automatically retrieve a privacy policy associated with the website; and
automatically analyze the privacy policy to determine the privacy policy score.
4. The system of claim 1 , wherein the instructions to determine the privacy policy score further include instructions that, when executed, cause the processor at the PPAS to:
semantically analyze the text of the privacy policy associated with the website to determine a plurality of privacy policy elements;
determine one or more scores for the plurality of privacy policy elements; and
determine the privacy policy score from the one or more scores.
5. The system of claim 4 , wherein the plurality of privacy policy elements include:
types of data collected;
methods used to collect the data;
uses for the data; and
language used to define a data collection or data usage opt-out policy.
6. The system of claim 1 , further comprising:
a network interface coupled to the processor and configured to communicate with a network; and wherein the memory further includes instructions that, when executed, cause the processor at the PPAS to:
intercept data from the device, the data including a website address;
determine the privacy policy score of a privacy policy corresponding to the data; and
provide the privacy policy score to the device.
7. The system of claim 1 , wherein the memory further includes instructions that, when executed, cause the processor at the PPAS to:
periodically retrieve a privacy policy associated with the website;
automatically compare the privacy policy to text of the privacy policy from a database to determine a change; and
in response to the change, automatically analyze the change to determine a new privacy policy score.
8. The system of claim 1 , wherein the privacy policy score comprises at least one of a numeric value and a letter grade.
9. The system of claim 1 , wherein blocking access to the website by the privacy policy plugin includes providing notification at the device that the privacy policy score falls below a threshold value.
10. A method comprising:
automatically searching a privacy policy database including privacy policy data associated with a plurality of websites to determine a privacy policy score for a privacy policy associated with a website using an identifier, the identifier including at least one of a web site address and a name of an application;
when the privacy policy score is found, retrieving the privacy policy score associated with the identifier;
when the privacy policy score is not found, retrieving text of the privacy policy from the website and automatically semantically analyzing the text of the privacy policy to determine the privacy policy score;
receiving, from a user, user preferences that reflect the relative importance to that user of each of a plurality of privacy policy characteristics;
customizing the privacy policy score based on the user preferences of that user;
providing the privacy policy score to a privacy policy plugin associated with an Internet browser application executing on a device;
displaying, at the device, the privacy policy score within a browser window of the Internet browser application;
blocking, at the device, access to the website by the privacy policy plugin associated with the Internet browser application, when the privacy policy score falls below a threshold value; and
surveying a plurality of users for receiving, from the plurality of users, user preferences reflecting the relative importance of one or more of the privacy policy characteristics to the plurality of users;
wherein the user preferences received from the plurality of users, are combined to produce a weighting factor for the plurality of privacy policy characteristics in determining the privacy policy score.
11. The method of claim 10 , further comprising:
receiving data that includes a uniform resource locator (URL) for the website; and
wherein the privacy policy score is determined in response to receiving the data.
12. The method of claim 10 , wherein automatically analyzing the retrieved privacy policy comprises:
semantically analyzing text of the retrieved privacy policy to determine a plurality of privacy policy elements;
determine one or more scores for the plurality of privacy policy elements; and
determine the privacy policy score from the one or more scores.
13. The method of claim 10 , wherein automatically analyzing the retrieved privacy policy comprises:
processing text from the retrieved privacy policy into categories;
analyzing the text in each category against pre-determined rules; and
determining the privacy policy score in response to analyzing the text.
14. The method of claim 10 , wherein blocking access to the website by the privacy policy plugin includes providing notification at the device that the privacy policy score falls below a threshold value.
15. A memory device comprising instructions that, when executed, cause a processor to:
determine a privacy policy score corresponding to one of a website and an application by searching a privacy policy database including a plurality of privacy policy scores and associated text of privacy policies, each privacy policy score corresponding to one of a website and an application;
when the privacy policy score is not present in the privacy policy database:
automatically retrieve text of a privacy policy corresponding to one of the website and the application from a data source when the privacy policy score is not present in the privacy policy database;
automatically determine one or more scores associated with sections of the text of the privacy policy by semantically analyzing text of the privacy policy to determine a plurality of privacy policy elements and determining a score for each of the plurality of privacy policy elements; and
determine the privacy policy score based on the one or more scores;
receive, from a user, user preferences that reflect the relative importance of a plurality of privacy policy characteristics to that user;
customize the determined privacy policy score based on the user preferences of that user;
survey a plurality of users for receiving, from the plurality of users, user preferences reflecting the relative importance of one or more of the privacy policy characteristics to the plurality of users;
wherein the user preferences received from the plurality of users, are combined to produce a weighting factor for the plurality of privacy policy characteristics in determining the privacy policy score;
provide the privacy policy score to a privacy policy plugin associated with an Internet browser application executing on a device;
display, at the device, the privacy policy score within the browser window of the Internet browser application; and
block, at the device, access to the website by the privacy policy plugin associated with the Internet browser application, when the privacy policy score falls below a threshold value.
16. The memory device of claim 15 , further comprising instructions that, when executed, cause the processor to determine the privacy policy score in response to receiving data from a device.
17. The memory device of claim 16 , wherein the data includes at least one of an identifier of the website and an identifier associated with the application.
18. The memory device of claim 16 , further comprising instructions that, when executed, cause the processor to:
determine a change to the privacy policy; and
automatically update the privacy policy score in response to determining the change.
19. The memory device of claim 15 , further comprising instructions that, when executed, cause the processor to:
search a privacy policy database for the one of the website and the application; and
when the one is present, retrieve the privacy policy score from the privacy policy database.
20. The memory device of claim 15 , wherein blocking access to the website by the privacy policy plugin includes providing notification at the device that the privacy policy score falls below a threshold value.