Tools for Achieving Usable Ex Post Transparency: A Survey <s> 6) STANDARDISED ICONS <s> European data protection regulation obliges every service provider to show a privacy policy on his web site. Many privacy policies are too long, too complicated to understand, and reading them is hardly appealing. To enhance the user’s awareness on who is collecting and handling their personal data for what purpose and to depict core information of the policy, privacy icons could be used in addition to written policies. Further, specific privacy icons could be helpful for expressing possible, planned or performed data processing between individuals, e.g., in social networks. <s> BIB001 </s> Tools for Achieving Usable Ex Post Transparency: A Survey <s> 6) STANDARDISED ICONS <s> This paper describes two privacy patterns for creating privacy transparency: the Personal Data Table pattern and the Privacy Policy Icons pattern, as well as a full overview of privacy transparency patterns. It is a first step in creating a full set of privacy design patterns, which will aid software developers with the realization of privacy by design. Privacy design patterns are design solutions to recurring privacy problems; as such they can facilitate the development of privacy-by-design solutions. Privacy design patterns as such exist, but a complete, uniform and readily applicable overview does not exist. This paper presents such an overview for privacy transparency patterns: they focus on solutions on how to create privacy transparency. Two privacy transparency patterns are fully described: the Personal Data Table pattern and the Privacy Policy Icons pattern. <s> BIB002
Similarly, there are currently no recommended standard sets of icons available to aid developers in designing meaningful UIs that build upon the principles of 'self-descriptiveness' and 'conformity with user expectations'  , as well as 'consistency and standards' and 'recognition rather than recall'  . Conversely, the GDPR mentions that ex ante transparency information may be accompanied by standardised icons, which should be machine-readable. Icons are also used in many ex post TETs, for example for displaying data types, purposes of processing or data recipients. Such pictographs should be intuitive and, for reasons of consistency, be the same as in ex ante TETs. Hence, the standardisation of meaningful policy icons will also be important for ex post TETs. Research conducted in this area BIB001 - BIB002 has also mostly focused on ex ante scenarios, exploring alternative ways to inform users about the privacy policies of online services while minimising the cognitive load required to comprehend their meanings. Many of the design proposals discussed failed to reflect the complexity of real-world scenarios. Even if individual prototypical designs were pointed out as promising, there has been no successful standardisation yet of recommended policy icons and of protocols for making them machine-readable. They are therefore far from being universally applicable to ex post scenarios.