Abstract
The proliferation of business and social mobile apps has led to an unprecedented surge in personal data processing, raising significant privacy concerns. While the General Data Protection Regulation (GDPR) provides a legal framework for data protection, many app developers struggle to create clear and concise privacy policies that effectively communicate their data practices to users. Existing privacy policy analysis methods, primarily focused on legal compliance, often overlook the qualitative aspects that are crucial for user trust and understanding. To address this gap, this paper introduces GenAI, a novel generative AI model designed to delve deeper into privacy policies and assess their quality against the principles outlined in GDPR Article 5 - “Principles relating to processing of personal data”. GenAI transcends traditional compliance checks by categorizing privacy policies based on “Good" and “Bad" standards, aligning with the GDPR’s core principles. This comprehensive evaluation encompasses both legal compliance and qualitative factors, providing a more nuanced understanding of privacy practices. To validate our approach, we conducted a rigorous analysis of 100 business and 100 social apps, revealing valuable insights into the current state of privacy policy quality. By doing this, our research aims to contribute to a future where privacy policies are not merely legal necessities but fundamental pillars of trust between app developers and users.