Privacy Detective game trains student devs to spot violations using real FTC legal docs
A narrative game turns legal documents into a detective hunt for privacy slip-ups.
Researchers at Carnegie Mellon University introduced Privacy Detective, a narrative investigation game designed to cultivate privacy awareness among student developers by turning real-world legal documents into an interactive puzzle. Players assume the role of a detective, searching for evidence of privacy violations within actual Federal Trade Commission (FTC) legal documents. They then organize that evidence into structured violation reports using curated templates.
In a between-subjects study, the team compared the game against a baseline condition where participants read raw FTC legal documents. Students who played Privacy Detective identified more true violations, flagged fewer non-issues (false positives), and provided more complete justifications for the violations they reported. This suggests that gamifying legal compliance training can improve developers' ability to recognize problematic data practices—addressing a critical gap in developer education. The paper is available on arXiv under submission number 2607.09022.
- The game uses real FTC legal documents as puzzle pieces, requiring players to scan for evidence of privacy violations.
- In a controlled study, game participants outperformed the baseline group on all three metrics: more true violations found, fewer false positives, and better-justified reports.
- Privacy Detective targets student developers early, aiming to reduce privacy-blind design decisions before they become habits.
Why It Matters
Addresses the root cause of privacy violations by training future developers to recognize problematic data practices early.