Tools for Achieving Usable Ex Post Transparency: A Survey <s> 3) TARGET ENTITY <s> This paper provides a short survey on transparency tools for privacy purposes. It defines the term transparency tools, argues why they are important and gives examples for transparency tools. A classification of transparency tools is suggested and some example tools are analyzed with the help of the classification. <s> BIB001 </s> Tools for Achieving Usable Ex Post Transparency: A Survey <s> 3) TARGET ENTITY <s> Today's rich service offer in the World Wide Web increasingly requires the disclosure of personal user data. Service providers' appetite for personal user data, however, is accompanied by growing privacy implications for Internet users. Addressing this rising threat, privacy-enhancing technologies aim at aiding users in protecting their personal data. Even though effective privacy laws facilitate users to edit and revoke already disclosed personal data, few PET solutions support users in exercising this right. Available tools lack intuitive interfaces and are built on powerful infrastructures on the provider side. In this paper we introduce the Data Disclosure Log component within a user-centric privacy architecture. Built on a browser-based logging extension, we present a visualization tool that displays past personal data disclosures from different perspectives. A graph-based view allows for the dynamic presentation of relations between selected entity types. Such an overview enables users to know the conditions of past personal data transactions at any time. This knowledge represents a prerequisite for an ex post revision or revocation of personal data. Usability and user acceptance of the developed prototype is evaluated in a conducted user test. <s> BIB002 </s> Tools for Achieving Usable Ex Post Transparency: A Survey <s> 3) TARGET ENTITY <s> Information sharing on the Internet has become a streamlined process through services such as e-mail, blogs and recently also Online Social Networks (OSNs). The speed of posting information in one central place and the convenience of this information reaching a vast audience at the same time is a great advantage of this style of communication, but at the same time also a danger. The aim of this article is thus to introduce a prototype software model that can analyse not only the Personally Identifiable Information (PII) that users share on OSNs, but with whom they share this. Such analysis will give users a good indication of how their private information is shared based on different settings within their OSN profiles. To successfully develop such a model, familiarity with the concepts of information sharing and PII is firstly investigated. Identifying information leakage within one of the most popular OSNs follows. In combination with our programming knowledge, a prototype model is introduced and an overview of preliminary results is given. Due to the generic nature of the model, we are able to visually introduce and explain the process of information deduction -- an aspect of information sharing often overlooked due to its invisible nature. After analysing the information gathered from our model, we conclude that the immense popularity of Facebook on both a global and local scale contribute to its success, but at the same time make its users more prone to leak information and subsequently be the potential targets of cyber criminals. The ease, anonymity and borderless nature of the Internet in combination with the poor default security settings of our investigated OSN all contribute to the lucrative industry of cyber crime. Proper user awareness is crucial to preventing the leaking of any information in an online environment, but for many users this still equates to (a) PII in the sky. <s> BIB003 </s> Tools for Achieving Usable Ex Post Transparency: A Survey <s> 3) TARGET ENTITY <s> We present a prototype of the user interface of a transparency tool that displays an overview of a user's data disclosures to different online service providers and allows them to access data collected about them stored at the services' sides. We explore one particular type of visualization method consisting of tracing lines that connect a user's disclosed personal attributes to the service to which these attributes have been disclosed. We report on the ongoing iterative process of design of such visualization, the challenges encountered and the possibilities for future improvements. <s> BIB004
The stakeholder referred to as target entity signifies the entity about which a TET provides information as a result of personal data being disclosed to it. In the case of a primary entity, that entity deals with a data controller with whom the data subject has a legal contract as regards the processing of her data. Conversely, a secondary entity denotes a downstream entity (see Figure 2 ) to whom the data controller has forwarded personal data for a specific purpose. The secondary entity might be a subsidiary or third party service provider responsible for storing and processing personal data for the data controller. In shared environments, it might also be another user of the system, that is, another data subject with whom the originator shares her data. Regardless of the identity of the recipient of the data, TETs inform users about the details regarding their personal data being disclosed to the respective entity. Whereas Hedbom BIB001 distinguishes between 'organisational' and 'conglomerate' scopes of processing entities, the survey at hand does not distinguish between stakeholders based on their administrative or technical affiliation. It focuses instead on the conceptual and topological differentiation between primary entities on the one hand and secondary downstream entities on the other. In many cases, shared environments and information about secondary entities correlate. Almost all TETs employed in usage contexts that rely on personal data being shared between multiple users and that provide information about the entity that queried that data fall into the category of providing insight into said secondary entities. The only notable exception is the TET by Kolter et al.  , whose distinctive purpose aims at sharing disclosed data publicly regardless of the ultimate recipient. The TETs presented by Bier et al.  , Angulo et al. BIB004 , Kolter et al. BIB002 , and Louw et al. BIB003 provide modes of visualisation specifically dedicated to displaying information about the chain of downstream processors. Such views are either hierarchical or sequential in nature, and they visualise semantic interrelations between the entities involved in processing the personal data disclosed to them.