Supporting material to the CCS 2019 paper, "(Un)informed Consent: Studying GDPR Consent Notices in the Field".
Last update: November 11, 2019
After the camera-ready deadline of ACM CCS 2019, we noticed an error in the figures depicting the interaction rates with the consent notices (Figures 3, 4, and 6 in the paper). This does not affect the overall results of our experiments. We fixed this, along with some minor typos. The updated version of the paper is available at:
This section depicts all of the consent notices / conditions tested in Experiments 1-3. Note that the text of the notices was translated to English from the German originals.
In Experiment 1, the following notice (referred to as BIN-S1 in Appendix B) was displayed at the six positions shown below.
For the checkbox-based notices (Category and Vendor types), the order of the checkboxes was randomized for each user, except for the Necessary category, which was always displayed first.
 |
|
| No option (NOP) | |
 |
 |
| Confirmation, non-nudging (CON-NN) | Confirmation, nudging (CON-NU) |
 |
 |
| Binary, non-nudging (BIN-NN) | Binary, nudging (BIN-NU) |
 |
 |
| Categories, non-nudging (CAT-NN) | Categories, nudging (CAT-NU) |
 |
 |
| Vendors, non-nudging (VEN-NN) | Vendors, nudging (VEN-NU) |
 |
 |
| Technical language, link to privacy policy (TE-PP) | Technical language, no link to privacy policy (TE-NP) |
 |
 |