On dark patterns and manipulation of website publishers by CMPs
On dark patterns and manipulation of website publishers by CMPs
复制标题
关于 CMP 对网站发布者的黑暗模式和操纵
DOI：
--
复制
发表时间：
2022
影响因子：
--
通讯作者：
Vincent Roca
中科院分区：
文献类型：
--
作者：
Michal Tóth;Nataliia Bielova;Vincent Roca
Web技术和服务广泛依赖于通过跟踪网站上的用户来收集数据。在欧盟，由于电子隐私指令（ePD）和通用数据保护条例（GDPR），收集此类数据需要用户同意。为了遵守这些法规并将同意收集集成到其网站中，网站发布者通常依赖称为同意管理提供商（CMP）的第三方承包商，这些承包商将同意弹出窗口作为服务提供。自GDPR于2018年5月生效以来，CMP的存在不断增加。在我们的工作中，我们系统地研究了同意弹出窗口的安装和配置过程及其对网站发布者决策的潜在影响。我们从五个流行的CMP公司提供的十个服务的配置过程进行了深入的分析，并确定了常见的不道德的设计选择。通过分析空实验网站上的CMP服务，我们发现网站发布者操纵订阅CMP付费计划，然后确定默认同意弹出窗口通常违反法律。我们还表明，配置选项可能会导致不合规，而跟踪扫描仪提供的CMP操纵发布者。我们的研究结果表明，中医药和设计空间提供给网站出版商的重要性，我们提出了关注周围的特权地位中医药和他们的战略影响网站出版商。
Web technologies and services widely rely on data collection via tracking users on websites. In the EU, the collection of such data requires user consent thanks to the ePrivacy Directive (ePD), and the General Data Protection Regulation (GDPR). To comply with these regulations and integrate consent collection into their websites, website publishers often rely on third-party contractors, called Consent Management Providers (CMPs), that provide consent pop-ups as a service. Since the GDPR came in force in May 2018, the presence of CMPs continuously increased. In our work, we systematically study the installation and configuration process of consent pop-ups and their potential effects on the decision making of the website publishers. We make an in-depth analysis of the configuration process from ten services provided by five popular CMP companies and identify common unethical design choices employed. By analysing CMP services on an empty experimental website, we identify manipulation of website publishers towards subscription to the CMPs paid plans and then determine that default consent pop-ups often violate the law. We also show that configuration options may lead to non-compliance, while tracking scanners offered by CMPs manipulate publishers. Our findings demonstrate the importance of CMPs and design space offered to website publishers, and we raise concerns around the privileged position of CMPs and their strategies influencing website publishers.
黑暗模式和同意横幅的法律要求：互动批评视角
DOI：
10.1145/3411764.3445779
发表时间：
2021
期刊：
CHI '21: Proceedings of the 2021 CHI Conference on Human Factors in Computing
影响因子：
--
作者：
Gray, Colin M.;Santos, Cristiana;Bielova, Nataliia;Toth, Michael;Clifford, Damian
通讯作者：
Clifford, Damian