We introduce a new perspective on the evaluation of privacy, where rights of the data subjects, privacy principles, and usability criteriaare intertwined. This new perspective is visually represented through a cube  where each of its three axes of variability captures, respectively: principles, rights , and usability criteria. In this way, our model, called Usable Privacy Cube (or UP Cube), brings out two perspectives on privacy: that of the data subjects and that of the controllers/processors. In the long run, the UP Cube is meant to be the model behind a new certification methodology capable of evaluating the usability of privacy . Our research builds on the criteriaproposed by the EuroPriSe certification scheme by adding usability criteria to their evaluation . We slightly URLanize the criteria of EuroPriSe to fit with the UP Cube model, i.e., we show how the EuroPriSe can be viewed as a combination of only principles and rights , forming the basis of the UP Cube. Usability criteria are defined based on goals that we extract from the data protection regulations , at the same time considering the needs, goals and characteristics of different types of users and their context of use . The criteria are designed to produce measurements of the level of usability with which the privacy goals of the data protection are reached. Considering usability criteria allows for greater business differentiation  beyond GDPR compliance.
We introduce a new model for evaluating privacy that builds on the criteria proposed by the EuroPriSe certification scheme by adding usability criteria. Our model is visually represented through a cube , called Usable Privacy Cube (or UP Cube), where each of its three axes of variability captures, respectively: rights of the data subjects , privacy principles, and usable privacy criteria . We slightly URLanize the criteria of EuroPriSe to fit with the UP Cube model, i.e., we show how the EuroPriSe can be viewed as a combination of only rights and principles , forming the two axes at the basis of our UP Cube. In this way we also want to bring out two perspectives on privacy: that of the data subjects and, respectively, that of the controllers/processors. We define usable privacy criteria based on usability goals that we have extracted from the whole text of the data protection regulations . The criteria are designed to produce measurements of the level of usability with which the goals are reached. Precisely, we measure effectiveness, efficiency, and satisfaction, considering both the objective and the perceived usability outcomes, producing measures of accuracy and completeness, of resource utilization (e.g., time, effort, financial), and measures resulting from satisfaction scales. In the long run, the UP Cube is meant to be the model behind a new certification methodology capable of evaluating the usability of privacy, to the benefit of common users. For industries, considering also the usability of privacy would allow for greater business differentiation , beyond GDPR compliance.
R
perspective on the evaluation of privacy, where rights of the data subjects, privacy principles, and usability criteriaare intertwined. This new perspective
model for evaluating privacy that builds on the criteria proposed by the EuroPriSe certification scheme by adding usability criteria. Our model
A
, called Usable Privacy Cube (or UP Cube),
R
principles, rights , and usability criteria. In this way, our model, called Usable Privacy Cube (or UP Cube), brings out two perspectives on privacy: that
rights
R
and that of the controllers/processors. In the long run, the UP Cube is meant to be the model behind a new certification methodology capable of evaluating the usability of privacy . Our research builds on the criteriaproposed by the EuroPriSe certification scheme by adding usability criteria to their evaluation
, privacy principles, and usable privacy criteria
R
principles and rights
rights and principles
R
basis of the
two axes at the basis of our
R
Usability criteria are defined based on
In this way we also want to bring out two perspectives on privacy: that of the data subjects and, respectively, that of the controllers/processors. We define usable privacy criteria based on usability
R
extract from the
have extracted from the whole text of the
D
, at the same time considering the needs, goals and characteristics of different types of users and their context of use
R
privacy goals of the data protection
goals
R
Considering usability criteria allows
Precisely, we measure effectiveness, efficiency, and satisfaction, considering both the objective and the perceived usability outcomes, producing measures of accuracy and completeness, of resource utilization (e.g., time, effort, financial), and measures resulting from satisfaction scales. In the long run, the UP Cube is meant to be the model behind a new certification methodology capable of evaluating the usability of privacy, to the benefit of common users. For industries, considering also the usability of privacy would allow
A
,