Privacy Usability Evaluation of IoT Smart Home Companion Application: A Pilot Study of the ABCDE Privacy Framework with an Industrial Multidisciplinary Team
Privacy usability in IoT smart home companion applications remains an underexplored domain despite mounting regulatory requirements and accelerating user adoption. Heuristic evaluation offers a scalable pathway to privacy usability assessment, yet validated frameworks for applying such methods are scarce. This study presents the first empirical application of the ABCDE Privacy Framework, a ten-heuristic instrument grounded in Nielsen’s usability principles and Privacy by Design, to an IoT companion application developed with a major European home appliance manufacturer. A structured workshop was conducted with a multidisciplinary team of seven participants (five industry professionals and two researchers) following a two-round protocol: a qualitative heuristic discussion phase (Round 1) and an individual scoring phase (Round 2). Data were analysed through MAXQDA (VERBI Software, Berlin, Germany). Average heuristic scores ranged from 3.6 (H9: error recovery) to 4.8 (H6: recognition; H10: documentation), with an overall mean of 4.32. Six second-order themes were identified, including Transparency Asymmetry, Centralised but Decontextualised Privacy, and Shared Household Complexity. This first pilot application suggests that the ABCDE Privacy Framework is feasible, time-efficient, and analytically productive in this industrial context, generating design-relevant insights and enabling cross-role team alignment within a two-hour session. These preliminary findings indicate its potential as a tool for Privacy-by-Design practice in IoT product development and provide a basis for future replication and validation.
Authors
- Eduardo Manchado Pérez (ORCID: https://orcid.org/0000-0003-1042-7924)
- César García-Hernández (ORCID: https://orcid.org/0000-0002-2729-8957)
- Amparo Coiduras-Sanagustín (ORCID: https://orcid.org/0000-0003-1127-8203)
Institutions
- Universidad de Zaragoza (ES)
- Universidad San Jorge (ES)
Publication Details
- Journal
- Journal of Cybersecurity and Privacy
- Published
- 2026-07-01
- DOI
- https://doi.org/10.3390/jcp6040114
- Primary Topic
- Privacy, Security, and Data Protection
- Type
- article
- Field-Weighted Citation Impact
- 0.00
Funders
- Gobierno de Aragón