So we are currently looking at how people understand and interpret the principle of purpose limitation in data collection and use. Currently, it looks like users don't feel eased by purposes presented in privacy policies, at all, especially with regard to passing on data to third parties

.

This is why we are looking at alternatives for increasing consumer trust in the processing practices of data-based services. Here, we are discussing different options:

-reformulation of purposes to be more specific

- the data processor may use contracts to bind third parties, to not use data differently than presented in the privacy policy.

- technical measures to prevent further disclosure of data (+ disclosure of code)

- Auditing by third parties.

Now I know, there is a lot of research on most of the singular items. But does anyone know of any studies, which would compare the trustworthiness of these measures from a consumer perspective?