Freely Given Consent?
Trung Tin Nguyen, Michael Backes, Ben Stock · Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security · 2022
Adopted in May 2018, the European Union's General Data Protection Regulation (GDPR) requires the consent for processing users' personal data to be freely given, specific, informed, and unambiguous. While prior work has shown that this often is not given through automated network traffic analysis, no research has systematically studied how consent notices are currently implemented and whether they conform to GDPR in mobile apps.