Setting the Bar Low: Are Websites Complying With the Minimum Requirements of the CCPA?

Setting the Bar Low: Are Websites Complying With the Minimum Requirements of the CCPA?
复制标题

降低标准:网站是否符合 CCPA 的最低要求?

DOI:
--
复制
发表时间:
2021
影响因子:
--
通讯作者:
Christo Wilson
Christo Wilson
中科院分区:
--
文献类型:
--
作者:
Maggie Van Nortwick;Christo Wilson

文献摘要

参考文献

被引文献

相似文献

2018年6月28日,加利福尼亚州立法机构通过了《加州消费者隐私法》(CCPA),这可以说是美国最全面的网络隐私立法。CCPA所涵盖的在线服务必须在其主页上提供一个超链接,并注明“请勿出售我的个人信息”(DNSMPI)。CCPA将于2020年1月1日生效,选择这个日期是为了让数据收集者有时间研究新法律并使自己遵守。在本研究中,我们通过关注DNSMPI链接开始调查网站是否遵守CCPA。使用从Tranco排名前100万个网站中抓取的纵向数据,我们检查了哪些网站包含DNSMPI链接,没有DNSMPI链接的网站是否违反了法律,网站是否使用地理隔离来动态地隐藏非加州人的DNSMPI链接,DNSMPI的采用如何随着时间的推移而变化,以及网站如何选择呈现DNSMPI链接(例如,在字体大小,颜色和位置方面)。我们认为,这些问题的答案对于促进法律下的执法行动至关重要,并有助于塑造未来的隐私法律和法规,例如,很快将围绕CCPA的继任者(即CPRA)开始制定规则。
Abstract On June 28, 2018, the California State Legislature passed the California Consumer Privacy Act (CCPA), arguably the most comprehensive piece of online privacy legislation in the United States. Online services covered by the CCPA are required to provide a hyperlink on their homepage with the text “Do Not Sell My Personal Information” (DNSMPI). The CCPA went into effect on January 1, 2020, a date that was chosen to give data collectors time to study the new law and bring themselves into compliance. In this study, we begin the process of investigating whether websites are complying with the CCPA by focusing on DNSMPI links. Using longitudinal data crawled from the top 1M websites in the Tranco ranking, we examine which websites are including DNSMPI links, whether the websites without DNSMPI links are out of compliance with the law, whether websites are using geofences to dynamically hide DNSMPI links from non-Californians, how DNSMPI adoption has changed over time, and how websites are choosing to present DNSMPI links (e.g., in terms of font size, color, and placement). We argue that the answers to these questions are critical for spurring enforcement actions under the law, and helping to shape future privacy laws and regulations, e.g., rule making that will soon commence around the successor to the CCPA, known as the CPRA.
DOI: 10.1145/3411764.3445779
发表时间: 2021
期刊: CHI '21: Proceedings of the 2021 CHI Conference on Human Factors in Computing
影响因子: --
作者:
Gray, Colin M.;Santos, Cristiana;Bielova, Nataliia;Toth, Michael;Clifford, Damian
通讯作者: Clifford, Damian
大规模隐私:PrivaSeer 网络隐私政策语料库简介
DOI: 10.18653/v1/2021.acl-long.532
发表时间: 2021
期刊: Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conference on Natural Language Processing
影响因子: --
作者:
Srinath, Mukund;Wilson, Shomir;Giles, C Lee
通讯作者: Giles, C Lee
定义隐私:用户如何解释隐私政策中的技术术语
DOI: --
发表时间: 2021
影响因子: --
作者:
Tang, Jenny;Shoemaker, Hannah;Lerner, Ada;Birrell, Eleanor
通讯作者: Birrell, Eleanor