Sana Athar

Sana Athar

Address
Max-Planck-Institut für Informatik
Saarland Informatics Campus
Campus E1 4
66123 Saarbrücken
Standort
E1 4 - 524
Telefon
+49 681 9325 3533
Fax
+49 681 9325 5719

Personal Information

I’m a PhD student at the Max Planck Institute for Informatics, fascinated by how people interact with technology—especially when privacy is in question. I take a mixed-methods approach to explore how technical, behavioral, cultural, and legal dimensions shape user privacy perceptions, and what these mean for the evolving privacy landscape across jurisdictions. When I’m not talking about privacy (which, admittedly, happens a lot), I enjoy cooking elaborate meals, exploring new places, and having deep, possibly overcaffeinated conversations about life.

 

Publications

2026
Athar, S., Gosain, D., Feldmann, A., Kaur, M., & Dao, H. (n.d.). “Nobody should control the end user”: Exploring Privacy Perspectives of Indian Internet Users in Light of DPDPA. In 21st ACM ASIA Conference on Computer and Communications Security (ACM ASIACCS 2026). Bangalore, India: ACM. doi:10.1145/3779208.3785287
(Accepted/in press)
Export
BibTeX
@inproceedings{Athar_ASIACCS26, TITLE = {“Nobody should control the end user”: {E}xploring Privacy Perspectives of Indian Internet Users in Light of {DPDPA}}, AUTHOR = {Athar, Sana and Gosain, Devashish and Feldmann, Anja and Kaur, Mannat and Dao, Ha}, LANGUAGE = {eng}, DOI = {10.1145/3779208.3785287}, PUBLISHER = {ACM}, YEAR = {2026}, PUBLREMARK = {Accepted}, BOOKTITLE = {21st ACM ASIA Conference on Computer and Communications Security (ACM ASIACCS 2026)}, ADDRESS = {Bangalore, India}, }
Endnote
%0 Conference Proceedings %A Athar, Sana %A Gosain, Devashish %A Feldmann, Anja %A Kaur, Mannat %A Dao, Ha %+ Internet Architecture, MPI for Informatics, Max Planck Society External Organizations Internet Architecture, MPI for Informatics, Max Planck Society Internet Architecture, MPI for Informatics, Max Planck Society Internet Architecture, MPI for Informatics, Max Planck Society %T “Nobody should control the end user”: Exploring Privacy Perspectives of Indian Internet Users in Light of DPDPA : %G eng %U http://hdl.handle.net/21.11116/0000-0012-7187-4 %R 10.1145/3779208.3785287 %D 2026 %B 21st ACM ASIA Conference on Computer and Communications Security %Z date of event: 2026-06-01 - 2026-06-05 %C Bangalore, India %B 21st ACM ASIA Conference on Computer and Communications Security %I ACM
Dao, H., Shinde, A., Athar, S., & Gosain, D. (n.d.). Clicking into Exposure: Uncovering Privacy Risks of Google Click Identifier in YouTube Ads. Proceedings on Privacy Enhancing Technologies Symposium (Proc. PETS 2026), 2026.
(Accepted/in press)
Export
BibTeX
@article{Dao_PETS26, TITLE = {Clicking into Exposure: {U}ncovering Privacy Risks of {G}oogle Click Identifier in {YouTube}Ads}, AUTHOR = {Dao, Ha and Shinde, Abhishek and Athar, Sana and Gosain, Devashish}, LANGUAGE = {eng}, YEAR = {2026}, PUBLREMARK = {Accepted}, JOURNAL = {Proceedings on Privacy Enhancing Technologies Symposium (Proc. PETS)}, VOLUME = {2026}, BOOKTITLE = {PETS 2026}, }
Endnote
%0 Journal Article %A Dao, Ha %A Shinde, Abhishek %A Athar, Sana %A Gosain, Devashish %+ Internet Architecture, MPI for Informatics, Max Planck Society External Organizations Internet Architecture, MPI for Informatics, Max Planck Society External Organizations %T Clicking into Exposure: Uncovering Privacy Risks of Google Click Identifier in YouTube Ads : %G eng %U http://hdl.handle.net/21.11116/0000-0012-718F-C %D 2026 %J Proceedings on Privacy Enhancing Technologies Symposium %O PoPETs %V 2026 %B PETS 2026 %O The 26th Privacy Enhancing Technologies Symposium PETS 2026
Amin, S. F., Athar, S., Feldmann, A., Dao, H., & Kaur, M. (2026). Navigating the Ethics of Internet Measurement: Researchers’ Perspectives from a Case Study in the EU. Retrieved from https://arxiv.org/abs/2511.10408
(arXiv: 2511.10408)
Abstract
Internet measurement research is essential for understanding, improving, and securing Internet infrastructure. However, its methods often involve large-scale data collection and user observation, raising complex ethical questions. While recent research has identified ethical challenges in Internet measurement research and laid out best practices, little is known about how researchers actually make ethical decisions in their research practice. To understand how these practices take shape day-to-day from the perspective of Internet measurement researchers, we interviewed 16 researchers from an Internet measurement research group in the EU. Through thematic analysis, we find that researchers deal with five main ethical challenges: privacy and consent issues, the possibility of unintended harm, balancing transparency with security and accountability, uncertain ethical boundaries, and hurdles in the ethics review process. Researchers address these by lab testing, rate limiting, setting up clear communication channels, and relying heavily on mentors and colleagues for guidance. Researchers express that ethical requirements vary across institutions, jurisdictions and conferences, and ethics review boards often lack the technical knowledge to evaluate Internet measurement research. We also highlight the invisible labor of Internet measurement researchers and describe their ethics practices as craft knowledge, both of which are crucial in upholding responsible research practices in the Internet measurement community.
Export
BibTeX
@online{Amin_2511.10408, TITLE = {Navigating the Ethics of Internet Measurement: Researchers' Perspectives from a Case Study in the {EU}}, AUTHOR = {Amin, Sahibzada Farhan and Athar, Sana and Feldmann, Anja and Dao, Ha and Kaur, Mannat}, LANGUAGE = {eng}, URL = {https://arxiv.org/abs/2511.10408}, EPRINT = {2511.10408}, EPRINTTYPE = {arXiv}, YEAR = {2026}, ABSTRACT = {Internet measurement research is essential for understanding, improving, and securing Internet infrastructure. However, its methods often involve large-scale data collection and user observation, raising complex ethical questions. While recent research has identified ethical challenges in Internet measurement research and laid out best practices, little is known about how researchers actually make ethical decisions in their research practice. To understand how these practices take shape day-to-day from the perspective of Internet measurement researchers, we interviewed 16 researchers from an Internet measurement research group in the EU. Through thematic analysis, we find that researchers deal with five main ethical challenges: privacy and consent issues, the possibility of unintended harm, balancing transparency with security and accountability, uncertain ethical boundaries, and hurdles in the ethics review process. Researchers address these by lab testing, rate limiting, setting up clear communication channels, and relying heavily on mentors and colleagues for guidance. Researchers express that ethical requirements vary across institutions, jurisdictions and conferences, and ethics review boards often lack the technical knowledge to evaluate Internet measurement research. We also highlight the invisible labor of Internet measurement researchers and describe their ethics practices as craft knowledge, both of which are crucial in upholding responsible research practices in the Internet measurement community.}, }
Endnote
%0 Report %A Amin, Sahibzada Farhan %A Athar, Sana %A Feldmann, Anja %A Dao, Ha %A Kaur, Mannat %+ External Organizations Internet Architecture, MPI for Informatics, Max Planck Society Internet Architecture, MPI for Informatics, Max Planck Society Internet Architecture, MPI for Informatics, Max Planck Society Internet Architecture, MPI for Informatics, Max Planck Society %T Navigating the Ethics of Internet Measurement: Researchers' Perspectives from a Case Study in the EU : %G eng %U http://hdl.handle.net/21.11116/0000-0012-7E22-9 %U https://arxiv.org/abs/2511.10408 %D 2026 %X Internet measurement research is essential for understanding, improving, and securing Internet infrastructure. However, its methods often involve large-scale data collection and user observation, raising complex ethical questions. While recent research has identified ethical challenges in Internet measurement research and laid out best practices, little is known about how researchers actually make ethical decisions in their research practice. To understand how these practices take shape day-to-day from the perspective of Internet measurement researchers, we interviewed 16 researchers from an Internet measurement research group in the EU. Through thematic analysis, we find that researchers deal with five main ethical challenges: privacy and consent issues, the possibility of unintended harm, balancing transparency with security and accountability, uncertain ethical boundaries, and hurdles in the ethics review process. Researchers address these by lab testing, rate limiting, setting up clear communication channels, and relying heavily on mentors and colleagues for guidance. Researchers express that ethical requirements vary across institutions, jurisdictions and conferences, and ethics review boards often lack the technical knowledge to evaluate Internet measurement research. We also highlight the invisible labor of Internet measurement researchers and describe their ethics practices as craft knowledge, both of which are crucial in upholding responsible research practices in the Internet measurement community. %K Computer Science, Human-Computer Interaction, cs.HC,Computer Science, Computers and Society, cs.CY,cs.SI
2025
Athar, S., Gosain, D., Feldmann, A., Kaur, M., & Dao, H. (2025). “Nobody should control the end user”: Exploring Privacy Perspectives of Indian Internet Users in Light of DPDPA. Retrieved from https://arxiv.org/abs/2508.17962
(arXiv: 2508.17962)
Abstract
With the rapid increase in online interactions, concerns over data privacy and transparency of data processing practices have become more pronounced. While regulations like the GDPR have driven the widespread adoption of cookie banners in the EU, India's Digital Personal Data Protection Act (DPDPA) promises similar changes domestically, aiming to introduce a framework for data protection. However, certain clauses within the DPDPA raise concerns about potential infringements on user privacy, given the exemptions for government accountability and user consent requirements. In this study, for the first time, we explore Indian Internet users' awareness and perceptions of cookie banners, online privacy, and privacy regulations, especially in light of the newly passed DPDPA. We conducted an online anonymous survey with 428 Indian participants, which addressed: (1) users' perspectives on cookie banners, (2) their attitudes towards online privacy and privacy regulations, and (3) their acceptance of 10 contentious DPDPA clauses that favor state authorities and may enable surveillance. Our findings reveal that privacy-conscious users often lack consistent awareness of privacy mechanisms, and their concerns do not always lead to protective actions. Our thematic analysis of 143 open ended responses shows that users' privacy and data protection concerns are rooted in skepticism towards the government, shaping their perceptions of the DPDPA and fueling demands for policy revisions. Our study highlights the need for clearer communication regarding the DPDPA, user-centric consent mechanisms, and policy refinements to enhance data privacy practices in India.
Export
BibTeX
@online{Athar2508.17962, TITLE = {``Nobody should control the end user'': {E}xploring Privacy Perspectives of {I}ndian {I}nternet Users in Light of {DPDPA}}, AUTHOR = {Athar, Sana and Gosain, Devashish and Feldmann, Anja and Kaur, Mannat and Dao, Ha}, LANGUAGE = {eng}, URL = {https://arxiv.org/abs/2508.17962}, EPRINT = {2508.17962}, EPRINTTYPE = {arXiv}, YEAR = {2025}, MARGINALMARK = {$\bullet$}, ABSTRACT = {With the rapid increase in online interactions, concerns over data privacy and transparency of data processing practices have become more pronounced. While regulations like the GDPR have driven the widespread adoption of cookie banners in the EU, India's Digital Personal Data Protection Act (DPDPA) promises similar changes domestically, aiming to introduce a framework for data protection. However, certain clauses within the DPDPA raise concerns about potential infringements on user privacy, given the exemptions for government accountability and user consent requirements. In this study, for the first time, we explore Indian Internet users' awareness and perceptions of cookie banners, online privacy, and privacy regulations, especially in light of the newly passed DPDPA. We conducted an online anonymous survey with 428 Indian participants, which addressed: (1) users' perspectives on cookie banners, (2) their attitudes towards online privacy and privacy regulations, and (3) their acceptance of 10 contentious DPDPA clauses that favor state authorities and may enable surveillance. Our findings reveal that privacy-conscious users often lack consistent awareness of privacy mechanisms, and their concerns do not always lead to protective actions. Our thematic analysis of 143 open ended responses shows that users' privacy and data protection concerns are rooted in skepticism towards the government, shaping their perceptions of the DPDPA and fueling demands for policy revisions. Our study highlights the need for clearer communication regarding the DPDPA, user-centric consent mechanisms, and policy refinements to enhance data privacy practices in India.}, }
Endnote
%0 Report %A Athar, Sana %A Gosain, Devashish %A Feldmann, Anja %A Kaur, Mannat %A Dao, Ha %+ Internet Architecture, MPI for Informatics, Max Planck Society External Organizations Internet Architecture, MPI for Informatics, Max Planck Society Internet Architecture, MPI for Informatics, Max Planck Society Internet Architecture, MPI for Informatics, Max Planck Society %T "Nobody should control the end user": Exploring Privacy Perspectives of Indian Internet Users in Light of DPDPA : %G eng %U http://hdl.handle.net/21.11116/0000-0011-F3D0-F %U https://arxiv.org/abs/2508.17962 %D 2025 %X With the rapid increase in online interactions, concerns over data privacy and transparency of data processing practices have become more pronounced. While regulations like the GDPR have driven the widespread adoption of cookie banners in the EU, India's Digital Personal Data Protection Act (DPDPA) promises similar changes domestically, aiming to introduce a framework for data protection. However, certain clauses within the DPDPA raise concerns about potential infringements on user privacy, given the exemptions for government accountability and user consent requirements. In this study, for the first time, we explore Indian Internet users' awareness and perceptions of cookie banners, online privacy, and privacy regulations, especially in light of the newly passed DPDPA. We conducted an online anonymous survey with 428 Indian participants, which addressed: (1) users' perspectives on cookie banners, (2) their attitudes towards online privacy and privacy regulations, and (3) their acceptance of 10 contentious DPDPA clauses that favor state authorities and may enable surveillance. Our findings reveal that privacy-conscious users often lack consistent awareness of privacy mechanisms, and their concerns do not always lead to protective actions. Our thematic analysis of 143 open ended responses shows that users' privacy and data protection concerns are rooted in skepticism towards the government, shaping their perceptions of the DPDPA and fueling demands for policy revisions. Our study highlights the need for clearer communication regarding the DPDPA, user-centric consent mechanisms, and policy refinements to enhance data privacy practices in India. %K Computer Science, Human-Computer Interaction, cs.HC,Computer Science, Computers and Society, cs.CY

Previous publications

Research Interests

  • Online user privacy
  • User perceptions
  • Cultural contexts
  • Human factors in computing
  • Privacy policy analysis

Honours & Awards

  • Double Gold Medalist, Bachelor’s degree — First in Department and Faculty, Aligarh Muslim University, India.

Recent Positions

August 2025 - Present:
PhD Student, D3 Internet Architecture

October 2023 - November 2024:
Student Research Assistant

Education

August 2025 - Present:
PhD Student, Saarland University, Germany

April 2022 - December 2024:
M.Sc. in Computer Science, Saarland University, Germany

August 2018 - May 2021:
B.Sc. (Hons.) in Computer Applications, Aligarh Muslim University, India