Search papers, labs, and topics across Lattice.
This paper investigates how users perceive and utilize security and privacy (S&P) information in consumer-facing generative AI tools through semi-structured interviews and design sessions with 21 U.S. GenAI users. The study reveals that users often disregard available S&P information during initial adoption, relying instead on proxies like popularity, and that post-adoption uncertainty about S&P practices limits GenAI usage, especially in sensitive contexts. Based on these findings, the authors propose five design dimensions for improving S&P transparency, emphasizing the need for trustworthy information and usable interfaces.
Users are largely ignoring the security and privacy information provided by GenAI tools, opting instead for popularity as a proxy, which significantly impacts their willingness to use these tools for sensitive tasks.
Users increasingly rely on consumer-facing generative AI (GenAI) for tasks ranging from everyday needs to sensitive use cases. Yet, it remains unclear whether and how existing security and privacy (S&P) communications in GenAI tools shape users' adoption decisions and subsequent experiences. Understanding how users seek, interpret, and evaluate S&P information is critical for designing usable transparency that users can trust and act on. We conducted semi-structured interviews and design sessions with 21 U.S. GenAI users. We find that available S&P information rarely drove initial adoption in practice, as participants often perceived it as incomplete, ineffective, or lacking credibility. Instead, they relied on rough proxies, such as popularity, to infer S&P practices. After adoption, uncertainty about S&P practices constrained participants' willingness to use GenAI tools, particularly in high-stakes contexts, and, in some cases, contributed to discontinued use. Participants therefore called for transparency that supports decision-making and use, including trustworthy information (e.g., independent evaluations) and usable interfaces (e.g., on-demand disclosure). We synthesize participants' desired design practices into five dimensions to facilitate systematic future investigation into best practices. We conclude with recommendations for researchers, designers, and policymakers to improve S&P transparency in consumer-facing GenAI.
