The California Consumer Privacy Act (CCPA) secures the right to Opt-Out for consumers in California. However, websites may implement complex consent mechanisms that potentially do not capture the user's true choices. We investigated the user choices in Cookie Consent Banner of US residents, the plurality of whom were from California, through an online experiment of 257 participants and compared the results with how they perceived to these Cookie Consent Banner. Our results show a contradiction between how often participants self-report their Opt-Out rates and their actual Opt-Out rate when interacting with a complex, CCPA-compliant website. This discrepancy expands the context with which modern websites may implement the CCPA without providing users sufficient information or instruction on how to successfully Opt-Out. We further elaborate on how US residents respond to and perceive the GDPR-like Opt-In model. Our results indicate that even though very few consumers actually exercised their right to Opt-Out, the majority of US consumers desire more transparent privacy policies that the current implementation of CCPA on websites lacks.
翻译:《加利福尼亚消费者隐私法案》(CCPA)保障了加州消费者的退出选择权。然而,网站可能实施复杂的同意机制,这些机制可能未能捕捉用户的真实选择。我们通过一项包含257名参与者的在线实验,调查了美国居民(其中多数来自加州)在Cookie同意横幅中的用户选择,并将其与他们对这些Cookie同意横幅的感知结果进行了比较。研究结果表明,在参与者自我报告的退出率与其与复杂CCPA合规网站交互时的实际退出率之间存在矛盾。这种差异拓展了现代网站在未向用户提供足够信息或指导以成功实现退出选择的情况下实施CCPA的语境。我们进一步阐述了美国居民如何响应和感知类似GDPR的同意模式。研究结果表明,尽管极少数消费者实际行使了退出选择权,但大多数美国消费者渴望当前CCPA网站实施方案所缺乏的更透明的隐私政策。