This week a Department of Computer Science team took part in the United Nations Privacy Hackathon and placed 1st out of 196 teams (325 participants) worldwide! Our team consisted of Manuj Mishra, Vishal Ramesh, and Konrad Kollnig. Manuj and Vishal are each pursuing the MSc in Advanced Computer Science while Konrad is a 4th year CS DPhil student with a focus on privacy in the HCC theme.

A recently published pre-print titled ‘GDPR and the Lost Generation of Innovative Apps’¹ observes that a third of apps on the Google Play Store disappeared from this app store around the introduction of the GDPR in May 2018. The authors deduce ‘that GDPR is the cause’. The effects of the GDPR on the app economy are an important field to study. Unfortunately, the paper currently lacks a control condition and a key variable. As a result, the effects on app exits reported in the paper are likely overestimated, as we will discuss. We believe there are other factors which may better explain these changes in the Play Store aside from the GDPR.

We are pleased to announce that our paper ‘A Fait Accompli? An Empirical Study into the Absence of Consent to Third-Party Tracking in Android Apps’ has been awarded with this year’s Student Paper Award of the FPF Privacy Papers for Policymakers.

With this award, the Future of Privacy Forum (FPF) recognises leading privacy research and analytical work that is relevant to policymakers in the United States Congress, at US federal agencies, and data protection authorities internationally.

We have more exciting privacy research to come in the following weeks. Stay tuned!

Back in September 2021, the UK Department for Digital, Culture, Media & Sport launched a public consultation on its planned reform of UK data protection law. Researchers within HCC have formulated a response to this consultation.

Our response highlights certain concerns found within the consultation that touch on the core issues of data protection and privacy, responsible research, and balancing support for organisations as well as individuals. The major themes of our response cover the following topics:

• Data intermediaries and institutions: Lack of clarity regarding data intermediaries, institutions, and practices put in place to safeguard individuals and support technological growth.
• AI and responsible innovation: The opportunities for AI innovation in the UK depend on a robust regulatory regime that encourages highly context-specific risk management. This will be best promoted through maintaining existing measures like Data Protection Impact Assessments, Data Protection Officers, record keeping, and prior consultation, amongst others.
• Erosion of trust in online tracking: Excessive box-ticking in the form of consent banners is not a necessary feature of existing data protection and privacy law, but rather a symptom of non-compliance with it.
• Removal of the balancing test: The removal of the balancing test for pre-approved legitimate interest purposes will create disproportionate risks for UK citizens, and a false sense of certainty for controllers.

In our response, we provide recommendations and suggestions on these themes and statements, intended to help build a sustainable future of AI and data protection within the UK that not only promotes innovation but also advocates for and protects individuals.

Dr Jun Zhao has been one of the invited experts in the CDEI Online Safety Data Initiative project.

The expert group is set up the Centre for Data Ethics and Innovation (CDEI) to provide advice and raise constructive challenge at key milestones across the Online Safety Data Initiative project lifecycle. The Online Harms Expert Group works to:

• Advise on the scope and direction of travel during all phases of the project, sense checking that the solutions proposed address the needs of the safety technology industry and meet the challenges of the online safety agenda.
• Advise on how data can be shared in a way that is privacy preserving and legally robust, which ensures the trust and confidence of all stakeholders.
• Ensure that the project team is aware of best practice in handling online harms data and data stewardship more generally.

The Online Harms Expert Group, composed of 10 leading experts, including

• Ali Shah (Head of Technology Policy at the Information Commissioner’s Office)
• Dr Asma Vranaki (Policy & Regulation Lead at the National Research Centre on Privacy, Harm Reduction and Adversarial Influence Online, Lecturer of Law at the University of Bristol’s Law School)
• Azmina Dhrodia (Senior Policy Manager of Gender and Data Rights at Webfoundation)
• Dr Claudia Peersman (Senior Research Associate at the National Research Centre on Privacy, Harm Reduction and Adversarial Influence Online, Lecturer within the EPSRC Centre for Doctoral Training in Cyber Security at the University of Bristol)
• Fred Langford (Senior Technology Policy Lead at Ofcom)
• Jack Hardinges (Programme Lead for Data Institutions at the Open Data Institute)
• Jon Howard (Executive Product Manager at the BBC)
• Poppy Wood (Senior Advisor at Reset Tech)
• Dr Jun Zhao (Senior Researcher at Oxford University’s Department of Computer Science)
• Andy Burrows (Head of Child Safety Online Policy at the National Society for the Prevention of Cruelty to Children)

Bored of COVID-19? We were, too. Because of this, a bunch of DPhil students from our research group met online on the weekend of 24/25 April 2021 for the first ever “HCC Hackathon”. We aimed to create a software artifact together, and have fun whilst doing so. We ended up pursuing four, related projects over this weekend.

Oxford University launched a COVID-19 Rebuilding Research Momentum Fund to support university academics whose research has been disrupted during the pandemic.

Dr Jun Zhao, who leads the KOALA project, received £5000 from the university to support her research development related to children’s data privacy protection.

Initially funded by an EPSRC IAA grant, the KOALA project investigates the impact of personal data collection practices of mobile apps upon the general well-being of young children aged 6-10, by working closely with children, and their parents and educators. The rebuilding fund will enable Dr Zhao to strengthen the current digital prototype KOALA Hero and prepare future user studies and public engagement activities.

Several HCC DPhil students have successfully passed their transfer or confirmation with flying colours this Michaelmas term. These are important milestones towards the completion of their DPhils. The students include:

• Mr Anirudh Ekambaranathan on responsible app design for children
• Ms Carolyn Ten Holter on responsible innovation in quantum computing technologies
• Ms Claudine Tinsman on Examining the association between the use of social networking service use and trauma: An Exploration of mitigation strategies and policy reform
• Mr Daniel Omeiza on explanations for autonomous vehicles
• Ms Ge Wang on Algorithmic Kids
• Mr Martin Kraemer on Empowering Communal and Digital Privacy in Smart Homes
• Mr Konrad Kollnig on Choice over Smartphone Technology

For those of you who are less familiar with DPhil education in Oxford, please refer to further details about these significant milestones on the university web page.

Many congratulations to them all! Look forward to another exciting year ahead!

The Responsible Technology Institute (RTI) has started a new initiative to connect graduate students from all disciplines and nations interested in topics related to responsible research and innovation. We will also hold monthly reading groups and facilitate work-in-progress seminars for research students.

By joining the RTI Student Network, you will:

• connect with other students who share your interest in responsible innovation
• deepen/broaden your knowledge in related topics through discussions and presentations
• receive supportive feedback from fellow students on on-going research projects
• have the opportunity to shape an emerging global network

If you would like to become a member, please reach out to Tyler Reinmund (tyler.reinmund.20@ucl.ac.uk) and Lize Alberts (lize.alberts@cs.ox.ac.uk) and include your name, university, year of study (e.g. Master’s, PhD), and research interest(s).

Thanks and we look forward to hearing from you!

A webinar was hosted jointly by the ReEnTrust project and APGDA on 2 December, 2020, to discuss algorithms and trust.

The event was chaired by APGDA Chair, Daniel Zeicher MP, and included contributions from a number of senior researchers from the ReEnTrust/HCC following the publication of their recent policy paper.

The one-hour event was well-attended by MPs and academics. The impact of trust on the development of future regulatory framework was particularly discussed after the presentation by the HCC researchers. The public attitudes towards the government use of data was considerably less pronounced than perceptions pertaining to private sector data. In particular, participants mentioned the importance of the NHS in terms of conveying trust to the general public around AI and medical data, in addition to the challenges associated with this if this group of professionals also don’t understand the principles themselves.

HCC researchers, Dr Jun Zhao and Dr Philip Inglesant, will follow the briefing event with a fuller policy report launch early next year, and further virtual roundtable events jointly with the APGDA. Please look out this space!