# Automating privacy decisions -- where to draw the line?

arXiv: https://arxiv.org/abs/2305.08747 · HTML: https://mlsanity.com/paper/2305.08747/

## Key facts

- Cited by 1 papers in the map (data through 14 Oct 2026).
- Builds on 7 of its 67 references that are in the map.
- First posted on arXiv 15 May 2023.

## Builds on (most cited first, 7 of 7)

- [Membership Inference Attacks against Machine Learning Models](https://mlsanity.com/paper/1610.05820/) (2016)
- [Dark Patterns after the GDPR: Scraping Consent Pop-ups and Demonstrating their Influence](https://mlsanity.com/paper/2001.02479/) (2020)
- [The Feasibility of Dynamically Granted Permissions: Aligning Mobile Privacy with User Preferences](https://mlsanity.com/paper/1703.02090/) (2017)
- [AI, Opacity, and Personal Autonomy](https://mlsanity.com/paper/2210.08995/) (2022)
- [Analysis of Privacy Policies to Enhance Informed Consent (Extended Version)](https://mlsanity.com/paper/1903.06068/) (2019)
- [Persuasion Meets AI: Ethical Considerations for the Design of Social Engineering Countermeasures](https://mlsanity.com/paper/2009.12853/) (2020)
- [Privacy Preference Signals: Past, Present and Future](https://mlsanity.com/paper/2106.02283/) (2021)

## Built on by (most cited first, 1 of 1)

- [AI-driven Personalized Privacy Assistants: a Systematic Literature Review](https://mlsanity.com/paper/2502.07693/) (2025)

## Abstract (arXiv)

Users are often overwhelmed by privacy decisions to manage their personal data, which can happen on the web, in mobile, and in IoT environments. These decisions can take various forms -- such as decisions for setting privacy permissions or privacy preferences, decisions responding to consent requests, or to intervene and ``reject'' processing of one's personal data --, and each can have different legal impacts. In all cases and for all types of decisions, scholars and industry have been proposing tools to better automate the process of privacy decisions at different levels, in order to enhance usability. We provide in this paper an overview of the main challenges raised by the automation of privacy decisions, together with a classification scheme of the existing and envisioned work and proposals addressing automation of privacy decisions.