Paul Neumann, Sebastian Thomas Büttner, Luca Hernández Acosta, Delphine Reinhardt, Michael Prilla

• Abstract Telepresence robots offer great opportunities for children with long-term illnesses to continue attending school. Consequently, they are already used if children are absent for long periods. When designing such systems, the privacy of various stakeholders must be considered. However, conflicts often arise because the privacy requirements of different user groups cannot be fulfilled simultaneously. In this paper, we analyze the corresponding trade-offs that have to be made when designing telepresence robots under conflicting privacy requirements. We analyzed previous literature and held three workshops with different user groups (children, parents, teachers, head teachers, media educators, and supporting personnel) with and without experience with telepresence robots in schools. Based on the literature and the workshop results, we present four major privacy trade-offs we identified and discuss design approaches for them. With this work, we contribute to the design research on telepresence robots in schools by revealing the major privacy-related conflicts and potential design approaches to overcome the conflicts.