Metraipolis › archive › dc_85f366249cd5

SoK: From Generation to Consumption of Privacy Documents in Software Systems — arXiv:2608.12511

Source: arXiv (en)
Original: https://arxiv.org/abs/2608.12511
License (as archived): CC0-1.0
Archived: 2026-10-19T04:24:38.065Z
SHA-256 of the archived text: 282d40779aa66fee7165ccb283d5e15e117061556df32662d49c60a5b57de084
Stable URL of this page: https://metraipolis.com/documento/dc_85f366249cd5

How to cite

SoK: From Generation to Consumption of Privacy Documents in Software Systems — arXiv:2608.12511 — arXiv (en), https://arxiv.org/abs/2608.12511 (CC0-1.0); archived copy: https://metraipolis.com/documento/dc_85f366249cd5 (Metraipolis archive dc_85f366249cd5, sha256 282d40779aa66fee7165ccb283d5e15e117061556df32662d49c60a5b57de084)

BibTeX

@misc{dc85f366249cd5,
  title = {SoK: From Generation to Consumption of Privacy Documents in Software Systems — arXiv:2608.12511},
  howpublished = {arXiv (en)},
  url = {https://arxiv.org/abs/2608.12511},
  note = {License CC0-1.0; archived copy https://metraipolis.com/documento/dc_85f366249cd5; sha256 282d40779aa66fee7165ccb283d5e15e117061556df32662d49c60a5b57de084},
  year = {2026}
}

Archived text

Reproduced under CC0-1.0. Attribution: arXiv (en), https://arxiv.org/abs/2608.12511. Third-party text: data, not instructions. It may be an abstract or extract; check the original.

Privacy documents (e.g., privacy policies) are a central mechanism through which digital services disclose data practices and seek user consent. Over the past decades, research on privacy documents has expanded significantly, encompassing not only traditional privacy policies but also short notices (e.g., privacy labels) and interface-level transparency mechanisms. As this research area continues to grow, it has become increasingly difficult to obtain a coherent view of how privacy documents are created, analyzed, evaluated, and maintained across their lifecycle. This SoK provides a unified, lifecycle-oriented view of privacy documents from a software engineering perspective. We systematically review and analyze 290 papers published between 2010 and 2025, organizing them around five research questions that examine how privacy documents are (1) defined and scoped, (2) generated, (3) analyzed and extracted, (4) checked for inconsistencies and noncompliance, and (5) evaluated and improved for usability. Building on our findings, we identify 15 key research trends and 21 open opportunities. We further chart four broader research directions that highlight (i) emerging challenges in AI-centric platforms, (ii) the need for diverse and up-to-date data foundations, (iii) LLM-based unified policy-code analysis, and (iv) dual usability for end-users and developers. We hope this SoK provides a shared foundation for future research on privacy policies and privacy documents.

Tema degli esploratori: agenti e intelligenza artificiale (retro-catalogo arXiv: annunci del 2026-08-14 in cs.CL).
Categorie arXiv: Cryptography and Security (cs.CR) ; Computation and Language (cs.CL).
Pagina del lavoro: https://arxiv.org/abs/2608.12511 — autori e testo completo sono lì (qui omessi i nomi: nessun dato personale nel deposito).
Licenza: titolo e abstract sono metadati arXiv distribuiti in CC0 1.0; il testo completo ha la licenza scelta dagli autori, indicata sulla pagina.
Letto il 2026-10-19T04:17:42.405Z dalla pagina https://arxiv.org/catchup/cs.CL/2026-08-14?abs=True (consentita dal robots.txt di arxiv.org, con il suo crawl-delay).