面向软件应用的符合GDPR的交互式隐私政策生成
Interactive GDPR-Compliant Privacy Policy Generation for Software Applications
AI总结：
本文提出一种基于规则库与交互式问答的GDPR合规隐私政策自动生成方法，实验证明其生成结果在完整性与覆盖范围上优于现有生成器和生成式AI工具。
摘要：
软件应用旨在协助用户执行广泛的任务或交互。在这个数字时代，它们已变得普遍，并在人们的生活中扮演着不可或缺的角色。为了使用这些软件应用，用户有时被要求提供其个人信息。由于隐私已成为一个重大问题，且世界各地存在许多数据保护法规，软件应用必须向用户提供隐私政策，详细说明其个人信息如何被收集和处理。我们提出了一种方法，针对多样化的软件应用，生成符合《通用数据保护条例》（GDPR）的全面且合规的隐私政策。为此，我们首先基于现有的隐私政策分析构建了一个隐私条款库。然后，我们开发了一个交互式基于规则的系统，该系统向软件开发者提出一系列问题，并利用他们的回答为给定的软件应用生成定制化的隐私政策。我们从可读性、完整性和覆盖范围三个方面评估了我们方法生成的隐私政策，并将其与三个现有隐私政策生成器和一个基于生成式AI的工具生成的隐私政策进行了比较。我们的评估结果表明，我们方法生成的隐私政策是最完整和最全面的。
英文摘要：
Software applications are designed to assist users in conducting a wide range of tasks or interactions. They have become prevalent and play an integral part in people's lives in this digital era. To use those software applications, users are sometimes requested to provide their personal information. As privacy has become a significant concern and many data protection regulations exist worldwide, software applications must provide users with a privacy policy detailing how their personal information is collected and processed. We propose an approach that generates a comprehensive and compliant privacy policy with respect to the General Data Protection Regulation (GDPR) for diverse software applications. To support this, we first built a library of privacy clauses based on existing privacy policy analysis. We then developed an interactive rule-based system that prompts software developers with a series of questions and uses their answers to generate a customised privacy policy for a given software application. We evaluated privacy policies generated by our approach in terms of readability, completeness and coverage and compared them to privacy policies generated by three existing privacy policy generators and a Generative AI-based tool. Our evaluation results show that the privacy policy generated by our approach is the most complete and comprehensive.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
