Florian Wittner und seine Co-Autor*innen schreiben über die durch die Vielzahl der beteiligten Akteure entstehenden Schwierigkeiten hinsichtlich Transparenz bei datenschutzrechtlichen Einwilligungen auf Websites und in Apps. Das Paper zeigt Möglichkeiten zur nutzerfreundlichen Gestaltung von rechtlich verpflichtenden Hinweisen auf. Bei der European Conference on Information Systems 2020 (ECIS) wird es vorgestellt vorgestellt.
Artikel downloaden
Abstract
Digital services have undergone a shift to multi-actor constellations characterised by the utilisation of personal data. By involving external actors, service capability and variety increase but so does the number of actors that gain access to personal data. Here, privacy policies are legal documents that serve two primary functions: specifying the purpose and details of data processing in a binding manner and informing users about it. Privacy policies therefore have special importance in which the processing is based on user consent. In a case study of the platform eBay, we identified 18 problems that point out difficulties in achieving consent in a meaningful way in today’s large-scale and massively interconnected digital service ecosystems. Based on these problems, the design goals are determined which help to find meaningful consent in digital service ecosystems. These goals include notifications for changed purposes of data processing in ecosystems or the reasonability of time needed for consent in relation to the usage time of the service. Thus far, no legal limits govern the reasonability of efforts for consent to privacy policies. This requires a fundamental rethinking of the concept of consent or far-reaching automation of privacy-related legal acts.
Kurtz, C; Wittner, F; Vogel, P; Semmann, M; Böhmann, T. (2020): Design Goals for Consent at Scale in Digital Service Ecosystems. ECIS 2020 Research Papers. 69. https://aisel.aisnet.org/ecis2020_rp/69
