  Although there are privacy-enhancing tools designed to protect users' online
privacy, it is surprising to see a lack of user-centric solutions allowing
privacy control based on the joint assessment of privacy risks and benefits,
due to data disclosure to multiple platforms. In this paper, we propose a
conceptual framework to fill the gap: aiming at the user-centric privacy
protection, we show the framework can not only assess privacy risks in using
online services but also the added values earned from data disclosure. Through
following a human-in-the-loop approach, it is expected the framework provides a
personalized solution via preference learning, continuous privacy assessment,
behavior monitoring and nudging. Finally, we describe a case study towards
"leisure travelers" and several future areas to be studied in the ongoing
project.
