User Perceived Privacy: Mental Models of Users' Perception of App Usage

Information privacy is jeopardized almost every time a person uses digital services or applications. The European General Data Protection Regulation, GDPR, recognizes that to empower the users and put focus on privacy, in the future all software (as well as applications) must provide transparency and consent to that the users are protected and are able to manage their privacy in contrast of today. This paper researches the perception of privacy in use of three selected applications: Endomondo, MobilePay and Roskilde Festival apps. In an empirical study, participants have been instructed to draw mental models of different use situations of these applications and to discuss where there needs to be a privacy notification or other to inform the user about the sharing of private data - as announced by the GDPR framework. The work constitutes the first step in a process of understanding the design challenge of the GDPR and for suggesting privacy related design for the interface design with a focus on the user experience.