Measuring Compliance with the California Consumer Privacy Act Over Space and Time

要旨

The widespread sharing of consumers' personal information with third parties raises significant privacy concerns. The California Consumer Privacy Act (CCPA) mandates that online businesses offer consumers the option to opt out of the sale and sharing of personal information. Our study automatically tracking the presence of the opt-out link longitudinally across multiple states after the California Privacy Rights Act (CPRA) went into effect. We categorize websites based on whether they are subject to CCPA and investigate cases of potential non-compliance. We find a number of websites that implement the opt-out link early and across all examined states but also find a significant number of CCPA-subject websites that fail to offer any opt-out methods even when CCPA is in effect. Our findings can shed light on how websites are reacting to the CCPA and identify potential gaps in compliance and opt-out method designs that hinder consumers from exercising CCPA opt-out rights.

著者
Van Hong. Tran
University of Chicago, Chicago, Illinois, United States
Aarushi Mehrotra
University of Chicago, Chicago, Illinois, United States
Marshini Chetty
University of Chicago, Chicago, Illinois, United States
Nick Feamster
University of Chicago, Chicago, Illinois, United States
Jens Frankenreiter
Washington University in St. Louis, Saint Louis, Missouri, United States
Lior Strahilevitz
University of Chicago, Chicago, Illinois, United States
論文URL

doi.org/10.1145/3613904.3642597

動画

会議: CHI 2024

The ACM CHI Conference on Human Factors in Computing Systems (https://chi2024.acm.org/)

セッション: Privacy for Safer Web and Apps

316A
5 件の発表
2024-05-15 20:00:00
2024-05-15 21:20:00