Dark Patterns and the Legal Requirements of Consent Banners: An Interaction Criticism Perspective

User engagement with data privacy and security through consent banners has become a ubiquitous part of interacting with internet services. While previous work has addressed consent banners from either interaction design, legal, and ethics-focused perspectives, little research addresses the connections among multiple disciplinary approaches, including tensions and opportunities that transcend disciplinary boundaries. In this paper, we draw together perspectives and commentary from HCI, design, privacy and data protection, and legal research communities, using the language and strategies of "dark patterns" to perform an interaction criticism reading of three different types of consent banners. Our analysis builds upon designer, interface, user, and social context lenses to raise tensions and synergies that arise together in complex, contingent, and conflicting ways in the act of designing consent banners. We conclude with opportunities for transdisciplinary dialogue across legal, ethical, computer science, and interactive systems scholarship to translate matters of ethical concern into public policy.

[1]  Luke Stark,et al.  Methods to account for values in human-centered computing , 2012, CHI Extended Abstracts.

[2]  Florian Cech,et al.  A Human-Centric Perspective on Digital Consenting: The Case of GAFAM , 2020, KES-HCIS.

[3]  Cristiana Santos,et al.  Do Cookie Banners Respect my Choice? : Measuring Legal Compliance of Banners from IAB Europe’s Transparency and Consent Framework , 2020, 2020 IEEE Symposium on Security and Privacy (SP).

[4]  Lorrie Faith Cranor,et al.  Harder to Ignore? Revisiting Pop-Up Fatigue and Approaches to Prevent It , 2014, SOUPS.

[5]  Susan Wyche,et al.  Values as lived experience: evolving value sensitive design in support of value discovery , 2009, CHI.

[6]  Rainer Böhme,et al.  Multiple Purposes, Multiple Problems: A User Study of Consent Dialogs after GDPR , 2019, Proc. Priv. Enhancing Technol..

[7]  Katie Shilton,et al.  Blended, Not Bossy: Ethics Roles, Responsibilities and Expertise in Design , 2017, Interact. Comput..

[8]  Linda Di Geronimo,et al.  UI Dark Patterns and Where to Find Them: A Study on Mobile Applications and User Perception , 2020, CHI.

[9]  Ronald Leenes.  The Cookiewars : From regulatory failure to user empowerment? , 2015 .

[10]  Colin M. Gray,et al.  Ethical Mediation in UX Practice , 2019, CHI.

[11]  Alina Huldtgren,et al.  Why value sensitive design needs ethical commitments , 2018, Ethics and Information Technology.

[12]  Colin M. Gray,et al.  "Nothing Comes Before Profit": Asshole Design In the Wild , 2019, CHI Extended Abstracts.

[13]  M. Buijzen,et al.  Dark and Bright Patterns in Cookie Consent Requests , 2020, Journal of Digital Social Research.

[14]  Susanne Bødker,et al.  Reimagining participatory design , 2018, Interactions.

[15]  M. Patton,et al.  Qualitative evaluation and research methods , 1992 .

[16]  Katie Shilton.  Engaging Values Despite Neutrality , 2018 .

[17]  Mary L Cummings,et al.  Integrating ethics in design through the value-sensitive design approach , 2006, Science and engineering ethics.

[18]  Sanne Kruikemeier,et al.  Tracking Walls, Take-It-Or-Leave-It Choices, the GDPR, and the ePrivacy Regulation , 2017 .

[19]  Jes A. Koepfler,et al.  How to see values in social computing: methods for studying values dimensions , 2014, CSCW.

[20]  Midas Nouwens,et al.  Dark Patterns after the GDPR: Scraping Consent Pop-ups and Demonstrating their Influence , 2020, CHI.

[21]  L. Cranor,et al.  Nudges for Privacy and Security , 2017, ACM Comput. Surv..

[22]  Wouter Joosen,et al.  Tranco: A Research-Oriented Top Sites Ranking Hardened Against Manipulation , 2018, NDSS.

[23]  Colin M. Gray,et al.  What Kind of Work Do "Asshole Designers" Create? Describing Properties of Ethical Concern on Reddit , 2020, Conference on Designing Interactive Systems.

[24]  Emerson R. Murphy-Hill,et al.  Does ACM’s code of ethics change ethical decision making in software development? , 2018, ESEC/SIGSOFT FSE.

[25]  Eleni Kosta.  Peeking into the cookie jar: the European approach towards the regulation of cookies , 2013, Int. J. Law Inf. Technol..

[26]  Katie Shilton,et al.  Values and Ethics in Human-Computer Interaction , 2018, Found. Trends Hum. Comput. Interact..

[27]  Tom Jenkins,et al.  Making public things: how HCI design can express matters of concern , 2014, CHI.

[28]  Than Htut Soe,et al.  Circumvention by design - dark patterns in cookie consent for online news outlets , 2020, NordiCHI.

[29]  R. Hertwig,et al.  Nudging and Boosting: Steering or Empowering Good Decisions , 2017, Perspectives on psychological science : a journal of the Association for Psychological Science.

[30]  Sarah Myers West,et al.  Data Capitalism: Redefining the Logics of Surveillance and Privacy , 2019 .

[31]  Arvind Narayanan,et al.  Dark patterns , 2020, ACM Queue.

[32]  Frank Kargl,et al.  Tales from the Dark Side: Privacy Dark Strategies and Privacy Dark Patterns , 2016, Proc. Priv. Enhancing Technol..

[33]  Cristiana Santos,et al.  Contribution to the public consultation on the CNIL's draft recommendation on "cookies and other trackers" , 2020 .

[34]  Jaap-Henk Hoepman,et al.  PDF hosted at the Radboud Repository of the Radboud University Nijmegen , 2022 .

[35]  David Benyon.  Designing interactive systems : a comprehensive guide to HCI, UX and interaction design , 2013 .

[36]  Sebastian Boring,et al.  Dark patterns in proxemic interactions: a critical perspective , 2014, Conference on Designing Interactive Systems.

[37]  Colin M. Gray,et al.  Dimensions of UX Practice that Shape Ethical Awareness , 2020, CHI.

[38]  John Sören Pettersson,et al.  The Dilemma of User Engagement in Privacy Notices , 2020, ACM Trans. Priv. Secur..

[39]  Aimee van Wynsberghe,et al.  Designing Robots for Care: Care Centered Value-Sensitive Design , 2013, Sci. Eng. Ethics.

[40]  John Vines,et al.  Understanding the Boundaries between Policymaking and HCI , 2019, CHI.

[41]  M. Steen,et al.  Upon Opening the Black Box and Finding It Full , 2015 .

[42]  Chris Nodder,et al.  Evil by Design: Interaction Design to Lead Us into Temptation , 2013 .

[43]  Eleni Kosta,et al.  Taming the cookie monster with Dutch law - A tale of regulatory failure , 2015, Comput. Law Secur. Rev..

[44]  Donald Gotterbarn.  Reconstructing the ACM code of ethics and teaching computer ethics , 1998, SGCS.

[45]  S. S. Herr,et al.  A Guide to Consent , 1999 .

[46]  Nokhbeh ZaeemRazieh,et al.  The Effect of the GDPR on Privacy Policies: Recent Progress and Future Promise , 2020 .

[47]  Jenifer Tidwell,et al.  Designing interfaces - patterns for effective interaction design , 2019 .

[48]  Martin Degeling,et al.  (Un)informed Consent: Studying GDPR Consent Notices in the Field , 2019, CCS.

[49]  Lorrie Faith Cranor,et al.  A Design Space for Effective Privacy Notices , 2015, SOUPS.

[50]  Alan Borning,et al.  Value Sensitive Design: Theory and Methods , 2002 .

[51]  Donald Gotterbarn,et al.  Using the new ACM code of ethics in decision making , 1993, CACM.

[52]  Colin M. Gray,et al.  Tensions in Enacting a Design Philosophy in UX Practice , 2020, Conference on Designing Interactive Systems.

[53]  Cristiana Santos,et al.  Are cookie banners indeed compliant with the law? Deciphering EU legal requirements on consent and technical means to verify compliance of cookie banners , 2019, ArXiv.

[54]  Alan Borning,et al.  Next steps for value sensitive design , 2012, CHI.

[55]  Michael Dieter.  Dark Patterns: Interface Design, Augmentation and Crisis , 2015 .

[56]  Alan Cooper,et al.  About Face 3: the essentials of interaction design , 1995 .

[57]  Rikard Harr,et al.  Dark Design Patterns: An End-User Perspective , 2020, Human Technology.

[58]  Alessandro Acquisti,et al.  Sleights of privacy: framing, disclosures, and the limits of transparency , 2013, SOUPS.

[59]  Reuben Kirkham,et al.  Using European Human Rights Jurisprudence for Incorporating Values into Design , 2020, Conference on Designing Interactive Systems.

[60]  David G. Hendry,et al.  Value Sensitive Design , 2019 .

[61]  Yang Wang,et al.  Nudges for Privacy and Security , 2017, ACM Comput. Surv..

[62]  Colin M. Gray,et al.  The Dark (Patterns) Side of UX Design , 2018, CHI.

[63]  M. Patton.  Qualitative evaluation and research methods, 2nd ed. , 1990 .

[64]  Jeffrey Bardzell,et al.  Interaction criticism: An introduction to the practice , 2011, Interact. Comput..

[65]  Janet Davis,et al.  Value Sensitive Design: Applications, Adaptations, and Critiques , 2013 .

[66]  Noëmi Manders-Huits,et al.  What Values in Design? The Challenge of Incorporating Moral Values into Design , 2010, Sci. Eng. Ethics.

[67]  Colin M. Gray,et al.  End User Accounts of Dark Patterns as Felt Manipulation , 2020, Proc. ACM Hum. Comput. Interact..

[68]  Jamie B. Luguri,et al.  Shining a Light on Dark Patterns , 2019, Journal of Legal Analysis.