Aleecia M. McDonald
Assistant Professor Carnegie Mellon University
- Pittsburgh PA
AleeciaMcDonald focuses on the public policy issues of Internet privacy, user expectations for privacy tools and behavioral economics.
Biography
Aleecia’s decade of experience working in software startups adds a practical focus to her academic work, and she was a Senior Privacy Researcher for Mozilla prior to working as Director of Privacy at Stanford. Her findings have been featured in media outlets such as the Washington Post, Ars Technica, and NPR. She has presented findings in testimony to the California Assembly, and contributed to testimony before the United States Senate and the Federal Trade Commission.
Areas of Expertise
Media Appearances
Judge advances claims over privacy of decades-old yearbook photos
Courthouse News Service
2021-11-02
For Aleecia M. McDonald, assistant professor of the practice that focuses on internet privacy issues at Carnegie Mellon University, she says that the context on when the pictures were first taken adds a new wrinkle into the equation.
California Passes Sweeping Law to Protect Online Privacy
The New York Times online
2018-06-28
But Aleecia M. McDonald, an incoming assistant professor at Carnegie Mellon University who specializes in privacy policy, said California’s privacy measure was one of the most comprehensive in the United States, since most existing laws — and there are not many — do little to limit what companies can do with consumer information.
Media
Industry Expertise
Education
Carnegie Mellon University
Ph.D.
Engineering & Public Policy
Carnegie Mellon University
M.S.
Engineering & Public Policy
Carnegie Mellon University
M.S.
Public Policy and Management
Carnegie Mellon University
B.A.
Professional Writing
Affiliations
- Cylab : Member
- Stanford's Center for Internet & Society : Non-resident Fellow
- Privacy Rights Clearinghouse : Board of Directors
- EPIC : Advisory Board
Links
Articles
Fighting the Fog: Evaluating the Clarity of Privacy Disclosures in the Age of CCPA
Computers and Society2021
Vagueness and ambiguity in privacy policies threaten the ability of consumers to make informed choices about how businesses collect, use, and share their personal information. The California Consumer Privacy Act (CCPA) of 2018 was intended to provide Californian consumers with more control by mandating that businesses (1) clearly disclose their data practices and (2) provide choices for consumers to opt out of specific data practices. In this work, we explore to what extent CCPA's disclosure requirements, as implemented in actual privacy policies, can help consumers to answer questions about the data practices of businesses. First, we analyzed 95 privacy policies from popular websites; our findings showed that there is considerable variance in how businesses interpret CCPA's definitions. Then, our user survey of 364 Californian consumers showed that this variance affects the ability of users to understand the data practices of businesses. Our results suggest that CCPA's mandates for privacy disclosures, as currently implemented, have not yet yielded the level of clarity they were designed to deliver, due to both vagueness and ambiguity in CCPA itself as well as potential non-compliance by businesses in their privacy policies.
