An Empirical Analysis of Data Deletion and Opt-Out Choices on 150 Websites
conference contributionposted on 2020-10-06, 15:41 authored by Hana HabibHana Habib, Yixin Zou, Aditi JannuAditi Jannu, Neha Sridhar, Chelse Swoopes, Alessandro AcquistiAlessandro Acquisti, Lorrie CranorLorrie Cranor, Norman SadehNorman Sadeh, Florian SchaubFlorian Schaub
Many websites offer visitors privacy controls and opt-out choices, either to comply with legal requirements or to address consumer privacy concerns. The way these control mechanisms are implemented can significantly affect individuals' choices and their privacy outcomes. We present an extensive content analysis of a stratified sample of 150 English-language websites, assessing the usability and interaction paths of their data deletion options and opt-outs for email communications and targeted advertising. This heuristic evaluation identified substantial issues that likely make exercising these privacy choices on many websites difficult and confusing for US-based consumers. Even though the majority of analyzed websites offered privacy choices, they were located inconsistently across websites. Furthermore, some privacy choices were rendered unusable by missing or unhelpful information, or by links that did not lead to the stated choice. Based on our findings, we provide insights for addressing usability issues in the end-to-end interaction required to effectively exercise privacy choices and controls.
Fifteenth Symposium on Usable Privacy and Security. August 12–13, 2019 • Santa Clara, CA, USA