Abstract Abstract: People experience transitional events during their lives that are significant, disruptive, and potentially challenging to navigate. Emotions usually run high, and the central actor may seek personalized support from “others” who are often identified online. An increased online presence, however, can also exacerbate vulnerabilities, making it challenging for individuals to preserve their privacy. Privacy-Enhancing Technologies (PETs) can support people undergoing transitions to have more control over their online identity and related disclosures. Nevertheless, available tools of this kind do not explicitly cater to the needs of such populations, leading to low uptake. To inform the future development of bespoke PETs, we carried out a survey to understand the population characteristics and online behaviors of four transition groups: (1) leaving the Armed Forces; (2) Relationship Breakdown (Romantic); (3) Serious Illness (Cancer); and (4) LGBTQ+ (“coming out” or gender transition). Our findings suggest that bespoke PETs should engender resilience and a sense of control over what is shared online via the identification, creation, and maintenance of “safe spaces” in which network members are restricted to trusted others who are deemed supportive of the actor’s transition.

The volume of personal information, accessible online about individuals is unprecedented.Such information may be pieced together by others, to create a more detailed picture of a person, exposing them to potential harms, such as employment loss, unwanted attention, fraud, and more.In this context, relevance is contextual, situational and dependent, based on the risk it poses to the subject.In this paper, we explore this risk-based notion of relevance with the following questions in mind: How well can individuals identify and judge risks associated with online personal information?And, to what extent does this change individuals' awareness of their own information-sharing practices?In a user study, 243 participants were tasked with browsing fabricated online profiles to identify potential "risky" posts in one of two scenarios regarding either Identity Theft or Reputational Damage.On average, 72.2% of participants identified at least one risky post.However, only 23.7% identified dependent posts that taken together substantially increased the risk of identity theft or reputational damage.Further, participants reported greater awareness of potential risks that could arise from their own, and/or their friends' information sharing practices.Our findings suggest that when relevance is dependent on combining separate pieces of information to reveal risk, participants struggle to identify these cumulative revelations.Moreover, our study highlights that when participants perform tasks that feature personal information, it can lead to positive and negative experiences; changing their perceptions and increasing awareness about their own information behaviours while also raising concerns around their routine online practices.

Significant life transitions are difficult and stressful periods, where personal identity and relationships undergo change. Accessing information and social support during these times requires disclosure: we must reveal information about ourselves to gain useful information. Yet, managing disclosure of information online during these periods presents great challenges and burdens to the central actor. We therefore sought to identify the information disclosure practices of people undergoing diverse selected life transitions (leaving the Armed Forces; relationship breakdown; coming out as LGBTQ+; living with cancer) with respect to online privacy and its implications for the design of information access systems. We achieved this via a scoping review, searching across nine databases to identify relevant articles, before carrying out an inductive thematic analysis of the charted data. We surface a key common disclosure strategy of multiple temporal selves, whereby people undergoing life transitions present multiple situated identities reflecting both their past and emerging identities, bound to desired levels of disclosure within specific online spaces/networks. This strategy is transacted via nuanced use of privacy features online, which calls for a high level of digital literacy. Our resulting design recommendations offer opportunities for information systems to support people in: safely partitioning their identity across new, and within existing, online spaces; creating spaces for personal reflection; and having a more informed awareness of the depth of information shared. The need for deeper understanding of the privacy requirements of two under-studied groups - leaving the Armed Forces, and living with cancer – is also highlighted.

The paper argues that protecting post-mortem privacy is not solely beneficial for the deceased and their relatives but enables intergenerational data-sharing. However, legal approaches alone are unlikely to generate the trust required and need to be supplemented with tools that assist data subjects in controlling what data they risk sharing more efficiently and, which they prefer to delete. Using the example of Dickens' “Bonfire of letters” as an example, we argue that the main challenge for law and digital technology is the cumulative risk of data breadcrumbs, which are likely to be individually harmless. Based on research within the EPSRC project “Cumulative Revelations of Personal Data”, we discuss how our findings indicate possible avenues to assist in more efficient intergenerational data sharing.

Searching for people online is a common search task that most of us have performed at some point or other. With so much information about people available online it is often amazing what one can find out about someone else -- especially when information taken from different sources is pieced together to create a more detailed picture of the individual, and then used to make inferences about them (leading to cumulative revelations ). As such, the relevance of one piece of information is often conditional and dependent on other pieces of information found. This creates interesting and novel challenges in evaluating informationrelevance when searching personal profiles, posts and related information about an individual, as well as the potential risks that can arise from such revelations. In this demonstration paper, we present a tool designed to investigate how people assess and judge the relevance and potential risks ofsmall, apparently innocuous pieces of information associated with fictitious personas, such as Taylor Addison, when searching and browsing online profiles and social media. The demonstrator also comprises a cyber-safety tool, which aims to provide education and raise awareness of the potential risks of cumulative revelations. It does so by engaging participants in different scenarios where the relevance of individual information items depends on the searcher and their particular underlying motivation.

When pieces from an individual's personal information available online are connected over time and across multiple platforms, this more complete digital trace can give unintended insights into their life and opinions. In a data narrative interview study with 26 currently employed participants, we examined risks and harms to individuals and employers when others joined the dots between their online information. We discuss the themes of visibility and self-disclosure, unintentional information leakage and digital privacy literacies constructed from our analysis. We contribute insights not only into people's difficulties in recalling and conceptualising their digital traces but of subsequently envisioning how their online information may be combined, or (re)identified across their traces and address a current gap in research by showing that awareness is lacking around the potential for personal information to be correlated by and made coherent to/by others, posing risks to individuals, employers, and even the state. We touch on inequalities of privacy, freedom and legitimacy that exist for different groups with regard to what they make (or feel compelled to make) available online and we contribute to current methodological work on the use of sketching to support visual sense making in data narrative interviews. We conclude by discussing the need for interventions that support personal reflection on the potential visibility of combined digital traces to spotlight hidden vulnerabilities, and promote more proactive action about what is shared and not shared online.

We present a novel de-centralised service for proving the provenance of online digital identity, exposed as an assistive tool to help non-expert users make better decisions about whom to trust online. Our service harnesses the digital personhood (DP); the longitudinal and multi-modal signals created through users’ lifelong digital interactions, as a basis for evidencing the provenance of identity. We describe how users may exchange trust evidence derived from their DP, in a granular and privacy-preserving manner, with other users in order to demonstrate coherence and longevity in their behaviour online. This is enabled through a novel secure infrastructure combining hybrid on- and off-chain storage combined with deep learning for DP analytics and visualization. We show how our tools enable users to make more effective decisions on whether to trust unknown third parties online, and also to spot behavioural deviations in their own social media footprints indicative of account hijacking.

Small pieces of data that are shared online, over time and across multiple social networks, have the potential to reveal more cumulatively than a person intends. This could result in harm, loss or detriment to them depending what information is revealed, who can access it, and how it is processed. But how aware are social network users of how much information they are actually disclosing? And if they could examine all their data, what cumulative revelations might be found that could potentially increase their risk of various online threats (social engineering, fraud, identify theft, loss of face, etc.)? In this paper, we present DataMirror, an initial prototype tool, that enables social network users to aggregate their online data so that they can search, browse and visualise what they have put online. The aim of the tool is to investigate and explore people's awareness of their data self that is projected online; not only in terms of the volume of information that they might share, but what it may mean when combined together, what pieces of sensitive information may be gleaned from their data, and what machine learning may infer about them given their data.

Romantic relationships are often facilitated through digital technologies, such as social networking sites and communication services. They are also facilitated through "digital possessions", such as messages sent to mobile devices and photos shared through social media. When individuals break up, digitally disconnecting can be facilitated by using those digital technologies and managing or curating these digital possessions. This research explores the break up stories of 13 individuals aged between 18 and 52. The aim of this work is to inform the design of systems focused on supporting individuals to decouple and disentangle digitally in the wake of a break up. Four areas of interest emerged from the data: communication, using digital possessions, managing digital possessions, and experiences of technology. Opportunities for design were identified in decoupling and disentangling, and designing around guilt.

We present findings from a qualitative study about how Internet use supports self-functioning following the life transition of retirement from work. This study recruited six recent retirees and included the deployment of OnLines, a design research artifact that logged and visualized key online services used by participants at home over four-weeks. The deployment was supported by pre- and post-deployment interviews. OnLines prompted participants' reflection on their patterns of Internet use. Position Exchange Theory was used to understand retirees' sense making from a lifespan perspective, informing the design of supportive online services. This paper delivers a three-fold contribution to the field of human-computer interaction, advancing a lifespan-oriented approach by conceptualizing the self as a dialogical phenomenon that develops over time, advancing the ageing discourse by reporting on retirees' complex identities in the context of their life histories, and advancing discourse on research through design by developing OnLines to foster participant-researcher reflection informed by Self Psychology.

Relationship breakdowns are undoubtedly difficult. Access to and use of technology can exacerbate the situation. In our networked society, shared lives generate vast amounts of shared digital data which can be difficult to untangle, whilst social media can provide an outlet to emotions that can take a public and often persistent form. In this paper, we report on a qualitative study that considered the role of technology in the process of a relationship breaking down. Four main themes emerged in our findings: communicating about the separation, change in social status, shared digital assets, and moving on. Opportunities for design are identified in reducing misunderstandings via CMCs, enhancing social media, supporting intimacy in distributed families, and refining service provision.

Most Human-Computer Interaction (HCI) researchers are accustomed to the process of formal ethics review for their evaluation or field trial protocol. Although this process varies by country, the underlying principles are universal. While this process is often a formality, for field research or lab-based studies with vulnerable users, formal ethics requirements can be challenging to navigate -- a common occurrence in the social sciences; yet, in many cases, foreign to HCI researchers. Nevertheless, with the increase in new areas of research such as mobile technologies for marginalized populations or assistive technologies, this is a current reality. In this paper we present our experiences and challenges in conducting several studies that evaluate interactive systems in difficult settings, from the perspective of the ethics process. Based on these, we draft recommendations for mitigating the effect of such challenges to the ethical conduct of research. We then issue a call for interaction researchers, together with policy makers, to refine existing ethics guidelines and protocols in order to more accurately capture the particularities of such field-based evaluations, qualitative studies, challenging lab-based evaluations, and ethnographic observations.

Memorialization is a ubiquitous human practice, which is increasingly intersecting with our digital lives. It is becoming ever more commonplace to see discussions and examples of digital memorials in research literature, technology shows and art galleries. However, the design space for digital memorials has, to date, been little explored. In this paper, we propose an emergent framework for digital memorials, based around notions of actors, inputs, form and message. The framework is grounded in examples of current memorialization practice, and situated within a contextual understanding of memorials as an emergent digital phenomenon within a networked society. In detailing the framework we highlight features of the design space that can be exploited in the development of bespoke memorial technologies, and identify potential areas of future interest that this framework brings to the fore, such as HCI's engagement with critical concepts of the postself and temporality.

This article presents research conducted to establish how information is shared across the personal social network in the sensitive context of a health crisis. We worked with parents of very sick babies who were cared for in a hospital's Neonatal Unit (NNU). Through a combination of interviews, a focus group, and surveys, we developed a user model of the information that parents wanted to share, and how they adapted this information to individual recipients. We then developed a prototype software tool which created adaptive updates for members of the parents' social network. The updates contained summaries of large volumes of complex medical data about the baby, nonmedical information about the parents, and practical information about the hospital. Updates were automatically adapted to individual members of parents' social networks, based on our user model. The tool was evaluated in a large NNU in the United Kingdom with parents of babies who were currently being cared for in the unit. We found that parents adapted the information that they shared about themselves and their babies based on the emotional proximity of their network members. They gave most detail to those who were emotionally closest to them and least to those who were less close. Parents also adapted information content to the recipient's tendency to worry and empathize. Two adaptive strategies were deployed by parents, (a) benign deceit—not telling the whole truth—and (b) promotion of empathetic members of the social network to a higher level of emotional proximity, so that they were given more information. We generated a number of directions for future work, and issues to consider around designing adaptive mediated communications systems for sensitive contexts. These include the potential to generalize our model to other medical contexts and considerations to apply when deliberately designing deceit into adaptive systems.

As technology progressively pervades all aspects of our lives, members of the HCI community are engaging with increasingly sensitive contexts in their research - for example, end of life, genocide, computer-mediated communication under oppressive regimes. The considerations generated by research in such contexts can go well beyond those addressed by generic ethical approval processes and institutional practice. Whilst it is standard to ensure that the wellbeing of participants is taken into account in research design and the ethical approval process, it is much less common for the researcher's own emotional wellbeing to be considered explicitly. This paper describes the role that a researcher's emotions may play in research, and the impact which research in sensitive contexts can have on researchers' emotional wellbeing and on research validity. A qualitative survey is described which investigated the support mechanisms which HCI researchers have in place in case they are distressed/troubled as a result of their research. The results of the survey are used, in combination with insights into how other disciplines address the topic, to synthesize suggestions for ways in which the HCI community can proactively incorporate consideration for the emotional wellbeing of the researcher into the research process.

In this paper, we describe collaborative processes and stakeholders involved in the period from when a person dies until they are laid to rest: the funeral, final disposition of the body, and (in some circumstances) victim identification. The rich mixture of technologies currently deployed during this brief period are categorized and critically analyzed. We then reflect on the implications of our findings, both for the design of technology that takes the end of life into account, and for the wider HCI community.

This study examined how emotional proximity and gender affect people's information requirements when someone that they know is chronically or critically ill. In an online study, participants were asked what information they would want to receive about members of their social network in three categories: someone who was very close, someone who was not so close, and someone who was not close at all. Our results show that the information that people want can be predicted from their gender and emotional proximity to the network member. The closer the relationship with the patient, the more information people want. Women want more information than men. We propose a model for the socially intelligent communication of health information across the social network, and discuss areas for its application.

There is a vast amount of data associated with any one patient. It is challenging for medical staff to understand all this data. It is even harder for a lay person, who may not even know what medical terms mean. The research project BabyTalk-Clan aims to create personalized summaries of data for a lay audience. It uses sensitive, highly-detailed clinical data relating to a patient. This includes medication given, test results, notes made by medical staff, and continuous physiological signals such as heart rate. We took a qualitative approach to knowledge acquisition for user requirements. Using interviews and a focus group within a Grounded Theory methodology, we discovered that most lay users want only a very high-level summary of the baby's state. What lay users do want is information about how the parents are coping, and what support they need. Findings were cross-validated through a questionnaire.

Users gain access to cash, confidential information and services at Automated Teller Machines (ATMs) via an authentication process involving a Personal Identification Number (PIN). These users frequently have many different PINs, and fail to remember them without recourse to insecure behaviours. This is not a failing of users. It is a usability failing in the ATM authentication mechanism. This paper describes research executed to evaluate whether users find multiple graphical passwords more memorable than multiple PINs. The research also investigates the success of two memory augmentation strategies in increasing memorability of graphical passwords. The results demonstrate that multiple graphical passwords are substantially more effective than multiple PIN numbers. Memorability is further improved by the use of mnemonics to aid their recall.This study will be of interest to HCI practitioners and information security researchers exploring approaches to usable security.