{"id":48387,"date":"2020-01-12T05:46:10","date_gmt":"2020-01-12T04:46:10","guid":{"rendered":"https:\/\/www.rudebaguette.com\/?p=48387"},"modified":"2020-01-12T05:46:21","modified_gmt":"2020-01-12T04:46:21","slug":"most-requests-for-cookie-consent-dont-comply-with-eu-rules-new-research-suggests","status":"publish","type":"post","link":"https:\/\/www.rudebaguette.com\/en\/2020\/01\/most-requests-for-cookie-consent-dont-comply-with-eu-rules-new-research-suggests\/","title":{"rendered":"Most requests for cookie consent don’t comply with EU rules, new research suggests"},"content":{"rendered":"\n

Most consent requests for digital cookies to track users\u2019 web activity do not comply with Europe\u2019s data collection regulations, according to new research, detailed in a report from TechCrunch<\/a>.  <\/p>\n\n\n\n

The findings echo another study published in August, which also suggested that consent notices routinely fail to offer the meaningful choice required by EU law\u2014which states that consent for data collection must be informed, specific, and freely given.<\/p>\n\n\n\n

Another recent decision by the European Court of Justice clarified that consent must be active and not merely implied, for example, by closing a pop-up window without responding. Offering pre-ticked boxes that require a user to opt-out is not legal, according to the court.<\/p>\n\n\n\n

To comply with European law, it must as easy to reject cookie tracking as to accept it.<\/p>\n\n\n\n

The new paper, called \u201cDark Patterns after the GDPR: Scraping Consent Pop-ups and Demonstrating their Influence,\u201d found that only about one in ten of the most prevalent Consent Management Platforms [CMPs] satisfied these requirements. They defined compliance as having \u201cno optional boxes pre-ticked, if rejection is as easy as acceptance, and if consent is explicit.\u201d<\/p>\n\n\n\n

A third of the CMPs relied on implied consent\u2014often, simply ignoring a pop-up and continuing to use the website was interpreted as consent.<\/p>\n\n\n\n

The researchers wrote:<\/p>\n\n\n\n

\u201cPopular CMP implementation wizards still allow their clients to choose implied consent, even when they have already indicated the CMP should check whether the visitor\u2019s IP is within the geographical scope of the EU, which should be mutually exclusive. This raises significant questions over adherence with the concept of data protection by design in the GDPR.\u201d<\/p>\n\n\n\n

They said the overwhelming majority made it more difficult to reject tracking than to accept it. Many CMP tools offer an \u201caccept all\u201d option that\u2019s much more visible and easily accessible than the corresponding \u201creject all\u201d button. <\/p>\n\n\n\n

\u201c74.3% of reject all buttons were one layer deep, requiring two clicks to press; 0.9% of them were two layers away, requiring at minimum three,\u201d they wrote.<\/p>\n\n\n\n

Furthermore, the sheer number of third-party trackers used by sites means it can take a \u201cprohibitively long time\u201d for users to become properly informed to give legal consent. One site used cookies from over 500 different third-party vendors.\u00a0<\/p>\n\n\n\n

In additional research, they studied the reactions of 40 participants to some of the most common CMP designs, finding that design choices like burying \u2018reject all\u2019 buttons had a significant effect on the likelihood that a user would give consent. Manipulative designs, they suggest, may violate the legal requirement that consent is freely given. <\/p>\n\n\n\n

Finally, responses in surveys suggest that pressure to consent is built into the model of pop-up consent requests, \u201cnot because of specific design decisions but merely because an action is required before the user can accomplish their main task and because they appear too frequently if they are shown on a website-by-website basis.\u201d<\/p>\n\n\n\n

The study was conducted by researchers from University College London, MIT, and Aarhus University.<\/p>\n\n\n\n

Image by StockSnap<\/a> from Pixabay<\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"

Most consent requests for digital cookies to track users\u2019 web activity do not comply with Europe\u2019s data collection regulations, according to new research, detailed in a report from TechCrunch.   The findings echo another study published in August, which also suggested that consent notices routinely fail to offer the meaningful choice required by EU law\u2014which states that<\/p>\n","protected":false},"author":77,"featured_media":48388,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"subtitle":"","footnotes":""},"categories":[113],"tags":[1685,1075,10214],"class_list":["post-48387","post","type-post","status-publish","format-standard","has-post-thumbnail","category-finance","tag-data-protection","tag-europe","tag-user-data"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/posts\/48387","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/users\/77"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/comments?post=48387"}],"version-history":[{"count":0,"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/posts\/48387\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/media\/48388"}],"wp:attachment":[{"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/media?parent=48387"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/categories?post=48387"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rudebaguette.com\/en\/wp-json\/wp\/v2\/tags?post=48387"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}