arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2110.02597cs.HC
收藏

Cookie Because,目的是什么?从法律角度分析Cookie横幅文本

Cookie Banners, What's the Purpose? Analyzing Cookie Banner Text Through a Legal Lens

Cristiana Santos, Arianna Rossi, Lorena Sánchez Chamorro, Kerstin Bongard-Blanchy, Ruba Abu-Salma

摘要:

当用户第一次访问网站时,会弹出一个cookie横幅,请求同意将cookie和其他跟踪器用于各种目的。不同于以往的工作,专注于评估的用户界面(UI)设计的cookie横幅,本文提出了一个深入的分析什么cookie横幅说,以获得用户的同意。我们采取了跨学科的方法来确定饼干横幅应该说什么。根据电子隐私指令(ePD)和通用数据保护条例(GDPR)的法律要求,我们对居住在欧盟的用户访问的最受欢迎的英语网站上呈现的约400个cookie横幅进行了手动注释。我们专注于分析Cookie横幅的目的以及这些目的是如何表达的(例如,任何误导或模糊的语言,任何使用行话)。我们发现89%的Cookie横幅违反了适用的法律。特别是,61%的横幅违反了目的特异性要求,提到了模糊的目的,包括“用户体验增强”。此外,30%的横幅使用了积极的框架,违反了自由给予和知情同意的要求。根据这些发现,我们提供了监管机构可以发现有用的建议。我们还描述了未来的研究方向。

英文摘要:

A cookie banner pops up when a user visits a website for the first time, requesting consent to the use of cookies and other trackers for a variety of purposes. Unlike prior work that has focused on evaluating the user interface (UI) design of cookie banners, this paper presents an in-depth analysis of what cookie banners say to users to get their consent. We took an interdisciplinary approach to determining what cookie banners should say. Following the legal requirements of the ePrivacy Directive (ePD) and the General Data Protection Regulation (GDPR), we manually annotated around 400 cookie banners presented on the most popular English-speaking websites visited by users residing in the EU. We focused on analyzing the purposes of cookie banners and how these purposes were expressed (e.g., any misleading or vague language, any use of jargon). We found that 89% of cookie banners violated applicable laws. In particular, 61% of banners violated the purpose specificity requirement by mentioning vague purposes, including "user experience enhancement". Further, 30% of banners used positive framing, breaching the freely given and informed consent requirements. Based on these findings, we provide recommendations that regulators can find useful. We also describe future research directions.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑