A Scoping Review and Guidelines on Privacy Policy's Visualization from an HCI Perspective

TL;DR

This paper reviews and synthesizes research on visualizing privacy policies from an HCI perspective, highlighting key trends, challenges, and future directions to improve user understanding and policy effectiveness.

Contribution

It provides a comprehensive framework analyzing the evolution of privacy policy visualizations and offers guidelines for future research and design improvements.

Findings

Shift from detailed disclosures to information condensation

Advances in NLP and LLMs enable semantic interpretation

Tension between standardized solutions and context-specific designs

Abstract

Privacy Policies are a cornerstone of informed consent, yet a persistent gap exists between their legal intent and practical efficacy. Despite decades of Human-Computer Interaction (HCI) research proposing various visualizations, user comprehension remains low, and designs rarely see widespread adoption. To understand this landscape and chart a path forward, we synthesized 65 top-tier papers using a framework adapted from the user-centered design lifecycle. Our analysis presented findings of the field's evolution across four dimensions: (1) the trade-off between information load and decision efficacy, which demonstrates a shift from augmenting disclosures to prioritizing information condensation and cognitive load management to counter the inefficacy of comprehensive texts, (2) the co-evolutionary dynamic of design and automation, revealing that complex design ambitions such as context-awareness drove the need for advanced NLP, while recent LLM breakthroughs are enabling the semantic interpretation required to realize those designs, (3) the tension between generality and specificity, highlighting the divergence between standardized, cross-platform solutions and the increasing necessity for specialized, context-aware interaction patterns in IoT and immersive environments, and (4) balancing stakeholder opinions, which shows that visualization efficacy is constrained by the complex interplay of regulatory mandates, developer capabilities and provider incentives. We conclude by outlining four critical challenges for future research.