Trends in Privacy Dialog Design after the GDPR: The Impact of Industry and Government Actions

Trends in Privacy Dialog Design after the GDPR: The Impact of Industry and Government Actions
复制标题

GDPR 后隐私对话设计的趋势:行业和政府行为的影响

DOI:
10.1145/3603216.3624963
复制
发表时间:
2023
期刊:
ACM WPES '23: Proceedings of the 22nd Workshop on Privacy in the Electronic Society
影响因子:
--
通讯作者:
Acquisti, Alessandro
Acquisti, Alessandro
中科院分区:
--
文献类型:
--
作者:
Warberg, Logan;Lefrere, Vincent;Cheyre, Cristobal;Acquisti, Alessandro

文献摘要

参考文献

相似文献

之前的研究发现,很大一部分欧盟网站通过实施隐私对话来响应 GDPR,其中包含不充分的同意选项或促使访问者接受跟踪的黑暗模式。到目前为止,很少有人关注这些隐私对话随时间的演变。我们使用 911 美国和欧盟新闻和媒体网站主页的屏幕截图,研究了 GDPR 生效后 18 个月内隐私对话的演变。我们评估了政府和第三方行动的影响,这些行动为隐私对话选择架构的合规性提供了额外的指导和工具。随着时间的推移,我们观察到提供接受或拒绝跟踪选项的隐私对话框的使用有所增加,而鼓励用户接受跟踪的推动则减少了。虽然关于各利益相关者对 GDPR 的反应在多大程度上有效改善了欧盟居民隐私的争论仍然存在,但我们的结果表明,外部冲击(例如政府干预)可能会促使网站做出改变,使 GDPR 的实际实施至少在名义上更接近其预期目标(例如使访问者更容易拒绝跟踪)。
Prior research found that a significant portion of EU-based websites responded to the GDPR by implementing privacy dialogs that contained inadequate consent options or dark patterns nudging visitors towards accepting tracking. Less attention, so far, has been devoted to capturing the evolution of those privacy dialogs over time. We study the evolution of privacy dialogs for a period of 18 months after the GDPR became effective using screenshots from the homepages of 911 US and EU news and media websites. We assess the impact of government and third-party actions that provided additional guidance and tools for compliance on privacy dialogs' choice architecture. Over time, we observe an increase in the use of privacy dialogs providing the option to accept or reject tracking, and a reduction of nudges that encourage users to accept tracking. While the debate over the extent to which various stakeholders' responses to the GDPR meaningfully improved EU residents' privacy remains open, our results suggest that exogenous shocks (such as government interventions) may prompt websites to enact changes that bring on-the-ground implementation of the GDPR at least nominally closer to its intended goals (such as making rejecting tracking easier for visitors).
未兑现的承诺:金融科技、数据隐私和 GDPR
DOI: 10.1007/s12525-023-00622-x
发表时间: 2023
期刊: Electronic Markets
影响因子: 8.5
作者:
G. Dorfleitner;Lars Hornuf;Julia Kreppmeier
通讯作者: Julia Kreppmeier
DOI: 10.1017/9781316831960.021
发表时间: 2015-07
期刊: 2013 21st IEEE International Requirements Engineering Conference (RE)
影响因子: --
作者:
F. Schaub;Rebecca Balebako;Adam L. Durity;L. Cranor
通讯作者: F. Schaub;Rebecca Balebako;Adam L. Durity;L. Cranor
DOI: 10.2139/ssrn.4239013
发表时间: 2022
期刊: SSRN Electronic Journal
影响因子: --
作者:
V. Lefrere;L. Warberg;C. Cheyre;V. Marotta;A. Acquisti
通讯作者: A. Acquisti
DOI: 10.1145/3411764.3445779
发表时间: 2021
期刊: CHI '21: Proceedings of the 2021 CHI Conference on Human Factors in Computing
影响因子: --
作者:
Gray, Colin M.;Santos, Cristiana;Bielova, Nataliia;Toth, Michael;Clifford, Damian
通讯作者: Clifford, Damian
设计规避——在线新闻媒体 cookie 同意中的暗模式
DOI: --
发表时间: 2020
期刊: Nordic Conference on Human-Computer Interaction
影响因子: --
作者:
Than Htut Soe;Oda Elise Nordberg;Frode Guribye;M. Slavkovik
通讯作者: M. Slavkovik