Jurisdiction as Structural Barrier: How Privacy Policy Organization May Reduce Visibility of Substantive Disclosures

• URL: http://arxiv.org/abs/2601.20792v1
• Date: Wed, 28 Jan 2026 17:29:59 GMT
• Title: Jurisdiction as Structural Barrier: How Privacy Policy Organization May Reduce Visibility of Substantive Disclosures
• Abstract summary: We identify a structural pattern we call jurisdiction-siloed disclosure.<n>Data practices affecting all users should appear in the main policy body.<n>Regulators could operationalize this through the FTC's "clear and conspicuous" standard.
• Score: 0.0
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: Privacy policies are supposed to provide notice. But what if substantive information appears only where users skip it? We identify a structural pattern we call jurisdiction-siloed disclosure: information about data practices appearing in specific, actionable form only within regional compliance sections labeled "California Residents" or "EU/UK Users," while general sections use vague or qualified language for the same practices. Our audit of 123 major companies identifies 282 potential instances across 77 companies (62.6% of this purposive sample). A conservative estimate restricted to practice categories validated against OPP-115 human annotations finds 138 instances across 54 companies (44%); post-2018 categories central to our findings await independent validation. If users skip jurisdiction-labeled sections as information foraging theory predicts, users outside regulated jurisdictions would receive less specific information about practices affecting them--a transparency failure operating through document architecture rather than omission. We propose universal substantive disclosure: practices affecting all users should appear in the main policy body, with regional sections containing only procedural rights information. This standard finds support in analogous disclosure regimes (securities, truth-in-lending, nutritional labeling) where material information must reach all affected parties. Regulators could operationalize this through the FTC's "clear and conspicuous" standard and GDPR transparency principles. This work is hypothesis-generating: we establish that the structural pattern exists and ground the transparency concern in behavioral theory, but direct measurement of jurisdiction-specific section skipping remains the critical validation priority. We release our methodology and annotated dataset to enable replication.

Related papers

• Phantoms and Disclosures: a Causal Framework for Auditing Synthetic Data [56.86147283213652]
  We present a customizable empirical auditing framework designed to detect and explain data disclosures.<n>Our framework introduces a mechanism to distinguish between "true disclosures"-where the system directly reproduces a user's information-and "phantom disclosures"-where the system incidentally generates a user's data.
  arXiv  Detail & Related papers  (2026-06-15T16:54:02Z)
• Broken Object Level Authorization in the Wild: An Empirical Taxonomy from 100+ Bug Bounty Disclosures [0.0]
  Broken Object Level Authorization (ABOL) is consistently ranked the most critical API security vulnerability.<n>This paper presents one of the first large-scale empirical analyses of BOLA in publicly disclosed bug bounty reports.
  arXiv  Detail & Related papers  (2026-05-25T13:55:24Z)
• NeurIPS Should Require Reproducibility Standards for Frontier AI Safety Claims [11.663456969895462]
  Most consequential claims in AI safety are often the least reproducible.<n>NeurIPS should require standards for papers making such claims.<n>We propose a three-tier disclosure framework, distinguishing public, controlled, and claim-restricted disclosure.
  arXiv  Detail & Related papers  (2026-05-05T17:25:28Z)
• Policy-Invisible Violations in LLM-Based Agents [10.660248467840821]
  We call this failure mode policy-invisible violations: cases in which compliance depends on entity attributes, contextual state, or session history absent from the agent's visible context.<n>We present PhantomPolicy, a benchmark spanning eight violation categories with balanced violation and safe-control cases.<n>We introduce Sentinel, an enforcement framework based on counterfactual graph simulation.
  arXiv  Detail & Related papers  (2026-04-14T01:15:15Z)
• RedacBench: Can AI Erase Your Secrets? [48.280759014096354]
  We introduce RedacBench, a benchmark for evaluating policy-conditioned redaction across domains and strategies.<n>RedacBench measures a model's ability to selectively remove policy-violating information while preserving the original semantics.<n>We quantify performance using 8,053 annotated propositions that capture all inferable information in each text.
  arXiv  Detail & Related papers  (2026-03-02T06:29:49Z)
• Challenges in Enabling Private Data Valuation [17.450381366291754]
  Data valuation methods quantify how individual training examples contribute to a model's behavior.<n> valuation scores can reveal whether a person's data was included in training, whether it was unusually influential, or what sensitive patterns exist in proprietary datasets.<n>Privacy is fundamentally in tension with valuation utility under differential privacy (DP)
  arXiv  Detail & Related papers  (2026-02-27T22:21:14Z)
• A Law Reasoning Benchmark for LLM with Tree-Organized Structures including Factum Probandum, Evidence and Experiences [76.73731245899454]
  We propose a transparent law reasoning schema enriched with hierarchical factum probandum, evidence, and implicit experience.<n>Inspired by this schema, we introduce the challenging task, which takes a textual case description and outputs a hierarchical structure justifying the final decision.<n>This benchmark paves the way for transparent and accountable AI-assisted law reasoning in the Intelligent Court''
  arXiv  Detail & Related papers  (2025-03-02T10:26:54Z)
• Properties of Effective Information Anonymity Regulations [6.8322083925948185]
  We develop a set of technical requirements for anonymization rules and related regulations. As an exemplar, we evaluate competing interpretations of regulatory requirements from the EU's General Data Protection Regulation.
  arXiv  Detail & Related papers  (2024-08-27T02:34:41Z)
• DELTA: Pre-train a Discriminative Encoder for Legal Case Retrieval via Structural Word Alignment [55.91429725404988]
  We introduce DELTA, a discriminative model designed for legal case retrieval. We leverage shallow decoders to create information bottlenecks, aiming to enhance the representation ability. Our approach can outperform existing state-of-the-art methods in legal case retrieval.
  arXiv  Detail & Related papers  (2024-03-27T10:40:14Z)
• Legally Binding but Unfair? Towards Assessing Fairness of Privacy Policies [0.0]
  Privacy policies are expected to inform data subjects about their data protection rights and explain data management practices. This implies that a privacy policy is written in a fair way, e.g., it does not use polarizing terms, does not require a certain education, or does not assume a particular social background. We identify from fundamental legal sources and fairness research, how the dimensions informational fairness, representational fairness and ethics / morality are related to privacy policies. We propose options to automatically assess policies in these fairness dimensions, based on text statistics, linguistic methods and artificial intelligence.
  arXiv  Detail & Related papers  (2024-03-12T22:53:32Z)
• The Impact of Differential Feature Under-reporting on Algorithmic Fairness [86.275300739926]
  We present an analytically tractable model of differential feature under-reporting. We then use to characterize the impact of this kind of data bias on algorithmic fairness. Our results show that, in real world data settings, under-reporting typically leads to increasing disparities.
  arXiv  Detail & Related papers  (2024-01-16T19:16:22Z)
• Transformer-based Entity Legal Form Classification [43.75590166844617]
  We propose the application of Transformer-based language models for classifying legal forms. We employ various BERT variants and compare their performance against multiple traditional baselines. Our findings demonstrate that pre-trained BERT variants outperform traditional text classification approaches in terms of F1 score.
  arXiv  Detail & Related papers  (2023-10-19T14:11:43Z)
• Counterfactual Explanations via Locally-guided Sequential Algorithmic Recourse [13.95253855760017]
  We introduce LocalFACE, a model-agnostic technique that composes feasible and actionable counterfactual explanations. Our explainer preserves the privacy of users by only leveraging data that it specifically requires to construct actionable algorithmic recourse.
  arXiv  Detail & Related papers  (2023-09-08T08:47:23Z)
• Relational Proxies: Emergent Relationships as Fine-Grained Discriminators [52.17542855760418]
  We propose a novel approach that leverages information between the global and local part of an object for encoding its label. We design Proxies based on our theoretical findings and evaluate it on seven challenging fine-grained benchmark datasets. We also experimentally validate our theory and obtain consistent results across multiple benchmarks.
  arXiv  Detail & Related papers  (2022-10-05T11:08:04Z)
• Having your Privacy Cake and Eating it Too: Platform-supported Auditing of Social Media Algorithms for Public Interest [70.02478301291264]
  Social media platforms curate access to information and opportunities, and so play a critical role in shaping public discourse. Prior studies have used black-box methods to show that these algorithms can lead to biased or discriminatory outcomes. We propose a new method for platform-supported auditing that can meet the goals of the proposed legislation.
  arXiv  Detail & Related papers  (2022-07-18T17:32:35Z)
• Decision Making with Differential Privacy under a Fairness Lens [65.16089054531395]
  The U.S. Census Bureau releases data sets and statistics about groups of individuals that are used as input to a number of critical decision processes. To conform to privacy and confidentiality requirements, these agencies are often required to release privacy-preserving versions of the data. This paper studies the release of differentially private data sets and analyzes their impact on some critical resource allocation tasks under a fairness perspective.
  arXiv  Detail & Related papers  (2021-05-16T21:04:19Z)
• Dados Abertos Governamentais no contexto de Pol\'iticas P\'ublicas de Sa\'ude e Sistemas Prisionais: Realidade ou Utopia? [0.0]
  The literature has reported a minimal set of criteria to categorize a specific data repository as open. The analyzed repositories focus on public health and prison systems.
  arXiv  Detail & Related papers  (2021-02-28T15:48:01Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.