Company Privacy Dashboards: Employee Needs and Requirements

As work becomes increasingly digital, companies store and process more personally identifiable information of their employees. This is typically beneficial for both employees and employers, who take advantage of simplified digital work processes and tools. The problem is that there is typically no opt-out option for employees, and employers can misuse collected data for productiveness tracking and other analyses that might be problematic with regard to privacy. Furthermore, employees oftentimes do not know (lack of transparency) and cannot influence (lack of self-determination) which personally identifiable information the employer collects and uses. As a result, many employees have a variety of privacy concerns. While various online services have recently successfully implemented so-called ""privacy dashboards"" for their users, comparable services are virtually unknown in the workplace. In this paper, we present employees' needs and requirements with regard to transparency and self-determination in the company context. The elicitation was based on a requirements model we introduce. We conducted two workshops with participants from four research institutes and one company. The results were compared to the state of the practice and used to build models that serve as a baseline for company privacy dashboards.