Tools for Achieving Usable Ex Post Transparency: A Survey <s> F. SUPPORT FOR INTERVENABILITY <s> This paper provides a short survey on transparency tools for privacy purposes. It defines the term transparency tools, argues why they are important and gives examples for transparency tools. A classification of transparency tools is suggested and some example tools are analyzed with the help of the classification. <s> BIB001 </s> Tools for Achieving Usable Ex Post Transparency: A Survey <s> F. SUPPORT FOR INTERVENABILITY <s> The work presented in this paper introduces the concept of On-line Interactive (OI) privacy feature which is defined as any on-line interactive tool, component or user-interface that creates privacy awareness and supports users in understanding their on-line privacy risks. These features have been developed as an interactive social translucence map that discloses the flow of personal information, a privacy enquiry for a direct chat about users' privacy concerns and a discussion forum presenting users' privacy concerns using their language in an interactive FAQ format. The paper presents an evaluation of a prototype of this set of embedded OI privacy features. The field study presented evaluates the prototype's usability and its effect on users' privacy awareness, understanding and attitude. 100 participants took part in the study and were drawn from groups of experienced and less experienced users. Both quantitative and qualitative data collection methods were used. Findings suggest that OI privacy features increase users' privacy awareness and encourage users to find out more about the uses of their personal data. However, users' ICT skills and Internet experience significantly influence whether a feature is favoured or otherwise. In general, it is concluded that privacy features are very much welcomed and necessary to empower users to manage their privacy concerns but some groups need to be further supported by social and institutional privacy management processes. <s> BIB002 </s> Tools for Achieving Usable Ex Post Transparency: A Survey <s> F. SUPPORT FOR INTERVENABILITY <s> We present a prototype of the user interface of a transparency tool that displays an overview of a user's data disclosures to different online service providers and allows them to access data collected about them stored at the services' sides. We explore one particular type of visualization method consisting of tracing lines that connect a user's disclosed personal attributes to the service to which these attributes have been disclosed. We report on the ongoing iterative process of design of such visualization, the challenges encountered and the possibilities for future improvements. <s> BIB003
Intervenability denotes a data subject's legal right to rectify and erase her personal data as stipulated by the GDPR, Art. 16 et seq.  . Transparency is a prerequisite for intervenability. Even though intervenability as a subsequent step goes beyond transparency, the legal transparency principle pursuant to the GDPR not only informs data subjects about their intervenability rights, but also makes them aware of how to exercise them. One way of making users aware of their intervenability rights is to support them in exercising those rights with regard to their data when those data are being made transparent. In that way, the context of exercising their rights may be comprehensible to them. To facilitate the process of intervention, TETs may tap directly into an automated functionality maintained by a data controller, provided such means exist. Intervenability relates to an 'interactive' means of control and verification in Hedbom's survey BIB001 , which also states that interactive control goes beyond 'read-only' access to disclosed personal data in that it allows data subjects or their proxies to ''actively influence the stored data.'' It relates to the HCI principles of being able to exercise control  -  over the process that involves storing and processing the data subject's personal data, as well as providing the means necessary for maintaining or revoking consent given previously  . 'PrivacyInsight' by Bier et al.  enables data subjects to exercise their legal rights as regards rectification and erasure of personal data. 'Data Track' ('GenomSynlig') BIB003 offers similar functionality, enabling data subjects to rectify and erase individual data items stored in the cloud. Both publications discuss and explicitly build upon the stipulations of the GDPR  , and, in theory, provide the technical means necessary to exercise the data subject's rights. Kani-Zabihi et al. BIB002 introduce 'Privacy Enquiry,' effectively an online chat, as a featured communication channel to the data controller. The primary purpose of the chat is to promptly express privacy concerns. It is left open as to whether this medium could also be used to issue a request to rectify or erase disclosed personal data. In the classification scheme of this survey, the adaptation of a user's privacy policies in terms of modifying the access control used to validate queries for the data subject's personal data by third parties is not considered an act of rectification. In particular, data disseminated throughout shared environments (Section V-A.2) can not be revoked that way. An adaptation of a user's preferences represents a purely technical operation that affects future queries of the user's personal data rather than being a legal process that entails the exertion of personal rights.