This survey is used to research the definitions of terms used for authorisations and consent. The aim is to correlate answers by industry and justification and to look at how these conform to the Consent Receipt (personal data processing receipt ISO 29184) works.
The objective is to move towards conformance profiles that are industry and jurisdictional specific, in an effort to develop best practice for conforming to requirements that require explicit consent for personal data processing - supporting the consent receipt and ISO 29184 works. In addition, to identify a set of criteria for evaluating dark patterns, to identify the malicious use of transparency for persuasion.
Here is the link to the google forms survey,
(Special Thanks: This survey was led by Mark facilitated with the help of Jan, Harsh, Vitor & Oscar)
This aim is to discuss, comment on and improve on this survey before asking members of CISWG to help distribute the survey on or after the CISWG meeting on September 12. The survey is narrowly scoped and focused in order to set a basis for follow on research and profile development.
Survey Summary
This is a short survey focused on assessing the terms used authorisations, consent based interaction, in permissions and agreements.
The Kantara Initiative Consent & Information Sharing WG, is working on a Personal Data Processing Receipt Specification, and has already produced a consent receipt that has been a basis for developing digital privacy records for services in and used with other standards efforts, industry and government.
The objective of this survey is to collect and audit the use of terms in the authorisation and permission-ing of personal data, and contrast against the standards used. The survey will aim is to inform the actual use of terms, and their interpretation from those who use them. As well as to consider a consent centric understanding of the various legal justifications for processing personal data.
More information can be found on the Kantara CISWG Wiki
Background Research
Links to research to help inform this study
Most EU cookie ‘consent’ notices are meaningless or manipulative, study finds
Natasha Lomas → https://techcrunch.com/2019/08/10/most-eu-cookie-consent-notices-are-meaningless-or-manipulative-study-finds/
Dark pattern info links
- https://www.darkpatterns.org/types-of-dark-pattern
- https://uxdesign.cc/the-12-types-of-dark-patterns-and-why-you-should-care-38a7b584777b
- https://medium.com/greater-than-experience-design/how-to-avoid-ux-dark-patterns-when-asking-people-for-their-data-c8ea01565312
- https://www.eff.org/deeplinks/2019/02/designing-welcome-mats-invite-user-privacy-0