To understand how privacy incidents lead to harms, HCI researchers have historically leveraged legal frameworks. However, these frameworks expect acute, tangible harms and thus may not cover the full range of human experience relevant to modern-day digital privacy. To address this gap, our research builds upon these existing frameworks to develop a more comprehensive representation of people's lived experiences with privacy harms. We analyzed 369 privacy incidents reported by individuals from the general public. We found a broader range of privacy incidents and harms than accounted for in existing legal frameworks. The majority of reported privacy harms were not based on tangible harm, but on fear and loss of psychological safety. We also characterize the actors, motives, and information associated with various incidents. This work contributes a new framework for understanding digital privacy harms that can be utilized both in research and practice.

翻译：为理解隐私事件如何导致损害，人机交互研究者历来借鉴法律框架。然而，这些框架预设了明确、有形的损害，因而可能无法涵盖与当代数字隐私相关的人类完整经验谱系。为弥补这一空白，本研究基于现有框架构建了更全面反映人们隐私损害生活经验的表征体系。我们分析了369例由普通公众报告的隐私事件，发现其类型与损害范围均超出既有法律框架的覆盖范畴。大多数报告的隐私损害并非基于有形损害，而是源于心理安全感的丧失与恐惧情绪。本研究进一步刻画了不同事件中的行为主体、动机及关联信息类型。此项工作提出了一个可用于研究与实践的新型数字隐私损害理解框架。