The consumption of a seamless travel experience requires travellers to share their personal data with numerous individual travel and tourism service providers. There is a general lack of guidelines on how travellers should manage their data-sharing activities while travelling, which leads to two unwanted situations:
Travellers simply share their data without understanding the privacy and security risks and consequences;
Travellers become over-concerned about such risks so that they stop sharing data, which reduces their overall travel experience and prevent organisations from providing better (more personalised) services.
The wide spectrum of data sharing with many entities including social media, instant messaging and other online social platforms makes the situation worse as travellers often cannot see the big picture of how they have shared their data in the past to adapt their data-sharing behaviour.
PriVELT will address the two-sided challenge associated with offering a seamless and highly personalised end-to-end travel experience while balancing the privacy and security needs of leisure travellers. On the one hand, travel service providers need to identify effective ways that incentivise travellers to share personal data in exchange for tangible benefits such as higher quality service, personalised offers, discounts, or add-on services. On the other hand, travellers need to better manage the sharing of their personal data to minimise privacy-related risks while optimising value from a seamless travel experience. Therefore, PriVELT aims to develop an innovative user-centric and privacy-aware digital platform that will empower leisure travellers to better manage the sharing of their personal data with travel service providers and other entities and foster new business opportunities for the travel and tourism industry through encouraging better (more transparent and effective) usage of travellers' data.
PriVELT will develop a user-centric platform based on a holistic socio-technical framework of privacy-related traveller behaviour. The framework will provide intervention points that effectively nudge travellers to share their personal data more responsibly. PriVELT draws from theories in social sciences, including consumer psychology and behavioural economics, to better explain how consumers make decisions to disclose personal information in exchange for values. PriVELT also considers travellers' psychological limitation, such as limited understanding of privacy risks, which may induce irrational behaviour in privacy-related decision-making while traveling.
In order to achieve its aim, PriVELT's research will be interdisciplinary, co-created, theory-informed, evidence-based, user-centric, and real world-facing. PriVELT will combine both social and technical methods to collect and analyse data, integrating focus groups and interviews with relevant stakeholders, a panel survey, lab-based user studies, and field studies with real domestic and international travellers (end users) to identify and apply an array of effective nudging strategies to inform travellers about the risks and consequences of sharing personal data while traveling.
One of the key outcomes will be a digital platform to be used for:
Monitoring travellers' data-sharing activities;
Enhancing situational awareness of privacy risks related to data shared;
Providing an innovative way of achieving dynamic consent management for participants, allowing dynamic updating of the consent while travelling;
Providing better recommendations for travellers to adapt their data-sharing behaviours.
The digital platform will be composed of three main components:
Tools on the traveller (user/client) side in the form of a mobile app;
An infrastructure and tools at the server side for anonymised data aggregation and analytics purposes; and
The API and user interfaces for consumers of data shared by travellers.
This project involves a group of researchers working in five academic disciplines (Computer Science, Tourism and Hospitality Management, Psychology, Business, Law) at three UK universities (University of Kent, University of Surrey, University of Warwick). The project is led by Prof Shujun Li of Kent Interdisciplinary Research Centre in Cyber Security (KirCCS), University of Kent. It has an overall budget of £1.4m, with 80% (£1.1m) funding from the Engineering and Physical Sciences Research Council (EPSRC). It is one of 11 projects resulting from the EPSRC's 2017 call on "Trust, Identity, Privacy and Security (TIPS) in the Digital Economy 2.0" (EPSRC news release). The 36-month project began in October 2018 and will run until September 2021.
Project website: https://privelt.ac.uk/