# Analysis of Privacy Policies to Enhance Informed Consent (Extended Version)

## TL;DR

This paper introduces a tool that analyzes privacy policies to identify privacy risks, aiming to improve informed consent by making data subjects more aware of potential privacy issues, demonstrated through an IoT case study.

## Contribution

It presents a novel privacy policy language and an automated risk analysis tool to help users understand privacy risks and make informed decisions.

## Key findings

- Effective privacy risk reporting for IoT policies
- Enhanced user awareness of privacy risks
- Automated analysis improves informed consent processes

## Abstract

In this report, we present an approach to enhance informed consent for the processing of personal data. The approach relies on a privacy policy language used to express, compare and analyze privacy policies. We describe a tool that automatically reports the privacy risks associated with a given privacy policy in order to enhance data subjects' awareness and to allow them to make more informed choices. The risk analysis of privacy policies is illustrated with an IoT example.