既成事实？对Android应用中第三方跟踪缺乏同意的实证研究
A Fait Accompli? An Empirical Study into the Absence of Consent to Third-Party Tracking in Android Apps
摘要：
第三方跟踪允许公司收集用户的行为数据，并跟踪他们在数字设备上的活动。这可能会将对用户私生活的深入了解掌握在陌生人手中，而且往往在用户没有意识到或没有明确同意的情况下发生。然而，欧盟和英国的数据保护法要求获得同意，1）访问和存储用户设备上的信息，2）合法处理个人数据作为第三方跟踪的一部分，正如我们在本文中分析的那样。本文进一步调查了是否以及在多大程度上同意在移动应用程序中实施。首先，我们分析了Google Play商店中具有代表性的应用程序样本。我们发现，大多数应用程序都参与了第三方跟踪，但很少有应用程序在这样做之前获得同意，这表明可能普遍违反了欧盟和英国的隐私法。其次，我们详细研究了最常见的第三方跟踪库。虽然大多数人承认他们依赖应用程序开发人员代表他们获得同意，但他们通常没有采取强有力的措施来确保这一点：同意要求的披露有限;缺乏默认的同意实施;合规指南很难找到，难以阅读，维护不善。
英文摘要：
Third-party tracking allows companies to collect users' behavioural data and track their activity across digital devices. This can put deep insights into users' private lives into the hands of strangers, and often happens without users' awareness or explicit consent. EU and UK data protection law, however, requires consent, both 1) to access and store information on users' devices and 2) to legitimate the processing of personal data as part of third-party tracking, as we analyse in this paper. This paper further investigates whether and to what extent consent is implemented in mobile apps. First, we analyse a representative sample of apps from the Google Play Store. We find that most apps engage in third-party tracking, but few obtained consent before doing so, indicating potentially widespread violations of EU and UK privacy law. Second, we examine the most common third-party tracking libraries in detail. While most acknowledge that they rely on app developers to obtain consent on their behalf, they typically fail to put in place robust measures to ensure this: disclosure of consent requirements is limited; default consent implementations are lacking; and compliance guidance is difficult to find, hard to read, and poorly maintained.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
