HCCYSep 5, 2019

(Un)informed Consent: Studying GDPR Consent Notices in the Field

arXiv:1909.02638v2436 citations
AI Analysis

This research addresses the problem of ineffective privacy consent mechanisms for European website users, highlighting regulatory gaps in implementation, though it is incremental in building on existing work on nudging and interface design.

The study investigated how different design choices in GDPR cookie consent notices affect user interaction and consent rates, finding that notice position, choice type, and nudging significantly influence user decisions, with binary choices leading to higher acceptance of tracking compared to granular options.

Since the adoption of the General Data Protection Regulation (GDPR) in May 2018 more than 60 % of popular websites in Europe display cookie consent notices to their visitors. This has quickly led to users becoming fatigued with privacy notifications and contributed to the rise of both browser extensions that block these banners and demands for a solution that bundles consent across multiple websites or in the browser. In this work, we identify common properties of the graphical user interface of consent notices and conduct three experiments with more than 80,000 unique users on a German website to investigate the influence of notice position, type of choice, and content framing on consent. We find that users are more likely to interact with a notice shown in the lower (left) part of the screen. Given a binary choice, more users are willing to accept tracking compared to mechanisms that require them to allow cookie use for each category or company individually. We also show that the wide-spread practice of nudging has a large effect on the choices users make. Our experiments show that seemingly small implementation decisions can substantially impact whether and how people interact with consent notices. Our findings demonstrate the importance for regulation to not just require consent, but also provide clear requirements or guidance for how this consent has to be obtained in order to ensure that users can make free and informed choices.

Code Implementations1 repo
Foundations

The foundational work for this paper's niche, ranked by how specifically the neighbourhood builds on it — not by global fame.

Your Notes