Multiple Purposes, Multiple Problems: A User Study of Consent Dialogs after GDPR
Multiple Purposes, Multiple Problems: A User Study of Consent Dialogs after GDPR
复制标题
多重目的，多重问题：GDPR 后同意对话框的用户研究
DOI：
--
复制
发表时间：
2019
影响因子：
--
通讯作者：
Rainer Böhme
中科院分区：
文献类型：
--
作者：
Dominique Machuletz;Rainer Böhme
摘要欧盟的《通用数据保护条例》（GDPR）要求网站在出于特定目的使用Cookie时征求同意。这扩大了同意对话框的相关设计空间。网站可以尝试最大限度地提高点击率和积极的同意决定，即使用户同意的目的比预期的更多。我们通过一个对照组和两个治疗组（两个国家的150名大学生）进行实验，评估在流行网站上观察到的做法。我们假设用户的同意决定受到以下因素的影响：（1）选项的数量，与选择扩散理论有关;（2）突出显示的默认按钮（“选择全部”）的存在，与消费者研究中的社会规范和欺骗理论有关。结果表明，看到默认按钮的参与者比对照组接受cookie的目的更多，而正确回忆他们的选择的能力更低。在被提醒他们的选择后，他们更经常后悔，并且认为同意对话比对照组更具欺骗性。用户是否被呈现一个或三个目的对他们的决定和感知没有显着影响。我们讨论的结果和轮廓的政策含义。
Abstract The European Union’s General Data Protection Regulation (GDPR) requires websites to ask for consent to the use of cookies for specific purposes. This enlarges the relevant design space for consent dialogs. Websites could try to maximize click-through rates and positive consent decision, even at the risk of users agreeing to more purposes than intended. We evaluate a practice observed on popular websites by conducting an experiment with one control and two treatment groups (N = 150 university students in two countries). We hypothesize that users’ consent decision is influenced by (1) the number of options, connecting to the theory of choice proliferation, and (2) the presence of a highlighted default button (“select all”), connecting to theories of social norms and deception in consumer research. The results show that participants who see a default button accept cookies for more purposes than the control group, while being less able to correctly recall their choice. After being reminded of their choice, they regret it more often and perceive the consent dialog as more deceptive than the control group. Whether users are presented one or three purposes has no significant effect on their decisions and perceptions. We discuss the results and outline policy implications.