Dark Patterns in the Opt-Out Process and Compliance with the California Consumer Privacy Act (CCPA)

要旨

To protect consumer privacy, the California Consumer Privacy Act (CCPA) requires businesses to provide consumers with a straightforward way to opt out of the sale and sharing of their personal information. However, the control that businesses enjoy over the opt-out process allows them to impose hurdles on consumers aiming to opt out, including by employing dark patterns. Motivated by the enactment of the California Privacy Rights Act (CPRA), which strengthens the CCPA and explicitly forbids certain dark patterns in the opt-out process, we investigate how dark patterns are used in opt-out processes and assess their compliance with CCPA regulations. Our research on 330 CCPA-subject websites reveals that these websites employ a variety of dark patterns. Some of these patterns are explicitly prohibited under the CCPA; others seem to take advantage of legal loopholes.

著者
Van Hong. Tran
University of Chicago, Chicago, Illinois, United States
Aarushi Mehrotra
University of Chicago, Chicago, Illinois, United States
Ranya Sharma
University of Chicago, Chicago, Illinois, United States
Marshini Chetty
University of Chicago, Chicago, Illinois, United States
Nick Feamster
University of Chicago, Chicago, Illinois, United States
Jens Frankenreiter
Washington University in St. Louis, Saint Louis, Missouri, United States
Lior Strahilevitz
University of Chicago, Chicago, Illinois, United States
DOI

10.1145/3706598.3714138

論文URL

https://dl.acm.org/doi/10.1145/3706598.3714138

動画

会議: CHI 2025

The ACM CHI Conference on Human Factors in Computing Systems (https://chi2025.acm.org/)

セッション: Dark Patterns and Content Moderation

G304
6 件の発表
2025-04-30 23:10:00
2025-05-01 00:40:00
日本語まとめ
読み込み中…