Abstract
Data protection is becoming increasingly important for users of digital services. Recent studies show that users are concerned that they have too little control over their personal data. However, users also complain that current interfaces for specifying privacy and security settings are too time-consuming and complicated. Therefore, we first identified the existing ways to configure these settings. Then, we experimentally examined which way of specification is best suited for a certain user type in terms of satisfaction or efficiency. Regarding efficiency, the type of specification with the smallest number of options, called security level, is best suited for all users. Regarding satisfaction, there is not a single type of specification that fits all user types, but different user types prefer different types of specification.