CSChecker: Revisiting GDPR and CCPA Compliance of Cookie Banners on the Web

Mingxue Zhang, Wei Meng, You Zhou, Kui Ren

Abstract

Privacy regulations like GDPR and CCPA have greatly affected online advertising and tracking strategies. To comply with the regulations, websites need to display consent management UIs (i.e., cookie banners) implemented under the corresponding technical frameworks, allowing users to specify consents regarding their personal data processing. Although prior works have investigated the cookie banner compliance problems with GDPR, the technical specification has significantly changed. The compliance status under the latest framework remains unclear. There also lacks a systematic study of CCPA banner compliance. More importantly, most work have focused on detecting the regulation violations, whereas little is known about the possible culprits and causes.

BibTeX

@inproceedings{Zhang-al:ICSE24,
  author    = {Mingxue Zhang and
               Wei Meng and
               You Zhou and
               Kui Ren},
  title     = {{CSChecker:} Revisiting {GDPR} and {CCPA} Compliance of Cookie Banners on the Web},
  booktitle = {ICSE},
  pages     = {174:1--174:12},
  publisher = {{ACM}},
  year      = {2024},
}

CSChecker: Revisiting GDPR and CCPA Compliance of Cookie Banners on the Web

Abstract

Related papers