A Human-Centric Perspective on Digital Consenting: The Case of GAFAM
A Human-Centric Perspective on Digital Consenting: The Case of GAFAM
复制标题
以人为本的数字同意视角：GAFAM 案例
DOI：
--
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
Florian Cech
中科院分区：
文献类型：
--
作者：
Soheil Human;Florian Cech
根据不同的法律框架，如欧洲通用数据保护条例（GDPR），最终用户的同意构成了众所周知的个人数据处理的法律依据之一。然而，研究表明，大多数终端用户很难理解他们在数字世界中同意的内容。此外，研究表明，边缘化人群在处理自己的数字隐私方面面临更多困难。在本文中，我们使用认知科学中的激进主义视角，开发了一个关于数字同意的基本以人为中心的框架。我们认为同意行为是一种社会认知行为，包括认知、集体和语境方面。基于这一理论框架，我们对b谷歌、亚马逊、Facebook、苹果和微软（GAFAM）这五大科技公司的征得同意做法进行了定性评估。评估表明，这些公司缺乏通过考虑同意行为的以人为本方面来赋予最终用户权力的努力。我们用这种方法来证明，获得同意的机制违反了公平、问责和透明的原则，并表明我们的方法甚至可能引发对获得同意的合法性的质疑——特别是考虑到GDPR法律框架内合法同意的基本要求。
According to different legal frameworks such as the European General Data Protection Regulation (GDPR), an end-user’s consent constitutes one of the well-known legal bases for personal data processing. However, research has indicated that the majority of end-users have difficulty making sense of what they are consenting to in the digital world. Moreover, it was demonstrated that marginalized people are confronted with even more difficulties dealing with their own digital privacy. In this paper, using an enactivist perspective in cognitive science, we develop a basic human-centric framework regarding digital consent. We argue the action of consenting is a sociocognitive action and includes cognitive, collective, and contextual aspects. Based on this theoretical framework, we present our qualitative evaluation of the practice of gaining consent conducted by the five big tech companies, i.e. Google, Amazon, Facebook, Apple, and Microsoft (GAFAM). The evaluation shows that these companies are lacking in their efforts to empower end-users by considering the human-centric aspects of the action of consenting. We use this approach to argue that the consent gaining mechanisms violate principles of fairness, accountability and transparency and suggest that our approach might even raise doubts regarding the lawfulness of the acquired consent–particularly considering the basic requirements of lawful consent within the legal framework of the GDPR.