| 摘要: |
| 移动应用的隐私权声明作为用户与应用的协议条款, 是用户信息采集前必须向用户披露的关键文档. 近年来, 国家出台多部政策法规明确要求移动应用需要配备清晰和规范的隐私权声明. 然而, 如今隐私权声明存在诸多问题, 如缺失核心条目的披露、省略信息采集的目的和使用模糊的表述等. 另一方面, 随着法律条款数量增多, 条款间要求各不相同, 隐私权声明合规检验工作愈加繁重. 提出一种移动应用隐私权声明的多标签分类方法, 这一方法通过比较4部核心法律法规对隐私权声明的要求, 总结梳理得到31类核心条目标签及特征. 在该标签体系下, 设计实现了一个隐私权声明语句的分类模型, 该模型可以实现94%的条目分类准确率. 基于该模型, 结合句法结构解析和实体识别方法, 在安卓应用和小程序场景中进行合规性检验, 发现79%、63%和94%的隐私权声明分别存在条目缺失、目的省略和表述模糊问题. |
| 关键词: 移动应用 隐私权声明 合规性检验 |
| DOI：10.13328/j.cnki.jos.007121 |
| 分类号: |
| 基金项目:国家重点研发计划(2022YFB2703501); 国家自然科学基金(62272377, 62232014, 72241433, 61721002, 62032010, 62002280);中央高校基本科研业务费专项基金; CCF-蚂蚁隐私计算专项科研基金; 陕西省科学技术协会青年人才托举计划 |
|
| Compliance Detection Method for Mobile Application Privacy Policy Statement |
|
WANG Yin, FAN Ming, TAO Jun-Jie, LEI Jing-Yi, JIN Wu-Xia, HAN De-Qiang, LIU Ting
|
|
Faculty of Electronic and Information Engineering, Xi'an Jiaotong University, Xi'an 710049, China
|
| Abstract: |
| The privacy policy statement of a mobile application serves as a crucial document that must be disclosed to users before collecting their information. However, current privacy policy statements face various issues, such as missing key disclosure items, omitting information collection purposes, and using vague descriptions. With an increasing number of legal provisions, the requirements for privacy policy statements vary, making compliance verification more burdensome. This study proposes a multi-label classification method for mobile application privacy policy statements. This method compares the requirements of four core laws and regulations regarding privacy policy statements, summarizes and organizes 31 categories of core item labels and features. Under this label system, the study designs and implements a classification model for privacy policy statement sentences, which achieves a 94% accuracy rate in item classification. Using this model, compliance verification was conducted in Android applications and mini-program scenarios, revealing issues such as missing items (79%), omitted purposes (63%), and vague descriptions (94%) in privacy policy statements. |
| Key words: mobile application privacy policy statement compliance detection |
