Study
User-Centred DesignHigh ImpactStrong effect

Privacy Link Placement Impacts User Compliance with CCPA Regulations

The visibility and accessibility of 'Do Not Sell My Personal Information' (DNSMPI) links on websites significantly influence user engagement with privacy regulations.

Proceedings on Privacy Enhancing Technologies · 2021

01

Key Findings

  • 01A significant portion of websites did not comply with the minimum requirements for DNSMPI links.
  • 02Websites employed various strategies, including geofencing, to limit the visibility of these links to specific user demographics.
  • 03The presentation of DNSMPI links varied widely, impacting their discoverability.
02

Application

Design takeaway

Ensure that legally mandated privacy controls, like 'Do Not Sell My Personal Information' links, are prominently displayed and easily accessible to all users, regardless of their location or browsing habits.

How to apply

When designing websites or digital products, conduct an audit of all privacy-related links and controls to ensure they are easily discoverable and understandable by the target audience.

Project actions

  • 01When researching privacy features, consider how users actually interact with them, not just if they exist.
  • 02Analyze the visual hierarchy and placement of interactive elements to understand their impact on user behaviour.
03

Method & Evidence

AimTo what extent do websites comply with the minimum requirements of the California Consumer Privacy Act (CCPA) regarding the placement and visibility of 'Do Not Sell My Personal Information' links?
MethodObservational Study / Longitudinal Data Analysis
ProcedureResearchers collected data from the top 1 million websites over time, analyzing the presence, placement, and presentation (e.g., font size, color) of DNSMPI links, and whether these links were dynamically hidden based on user location.
SampleTop 1 million websites
ContextWeb design and online privacy compliance

Variables

IVWebsite design and implementation of privacy links
DVCompliance with CCPA regulations (presence, visibility, accessibility of DNSMPI links)
CVWebsite ranking (top 1M), time of data collection
04

Strengths & Limitations

Strengths

  • +Large-scale data collection from top websites.
  • +Longitudinal analysis to track changes over time.

Limitations

The study's findings are specific to the CCPA and may not directly apply to privacy regulations in other jurisdictions. The dynamic nature of web design means compliance can change rapidly.

Reliability & validity

The study's reliability is supported by the large sample size and longitudinal data collection. Validity is enhanced by focusing on objective measures of link presence and presentation, though subjective user perception of compliance is not directly measured.

Think critically

To what extent should design decisions be driven by legal compliance versus user experience, and how can these two be effectively balanced?

05

Design Principles

"Transparency in privacy controls is paramount for user trust and regulatory adherence."

For designers, understanding how users interact with privacy controls is crucial for building trust and ensuring legal compliance. Poorly implemented privacy features can lead to user frustration and potential legal repercussions for the organization.

06

What This Means for Your Design

Many websites don't make it easy for people to find the button that lets them stop the sale of their personal information, which is required by law.

How to use in your project

  • 1.Use this study to justify the importance of user-friendly privacy controls in your design project, demonstrating an understanding of real-world compliance challenges.
07

Add to My Project

08

Quick Cite

(2021). Setting the Bar Low: Are Websites Complying With the Minimum Requirements of the CCPA?. Proceedings on Privacy Enhancing Technologies. https://doi.org/10.2478/popets-2022-0030 Retrieved from https://designdex.org/study/1cceef76-956a-454f-9a19-2cc46ac3c022/privacy-link-placement-impacts-user-compliance-with-ccpa-regulations

Paragraph starter

Research indicates that the implementation of privacy regulations, such as the CCPA, is often suboptimal from a user-centred perspective. Studies analyzing the placement and visibility of 'Do Not Sell My Personal Information' links have revealed that many websites fail to meet minimum compliance standards, with some actively obscuring these controls. This highlights a critical design challenge: ensuring that legally mandated features are not only present but also accessible and understandable to users, thereby fostering trust and genuine user agency.

09

Source

Proceedings on Privacy Enhancing Technologies

Setting the Bar Low: Are Websites Complying With the Minimum Requirements of the CCPA?

journal · 2021

View source

Questions about this research

What does the research say about privacy link placement impacts user compliance with ccpa regulations?
Ensure that legally mandated privacy controls, like 'Do Not Sell My Personal Information' links, are prominently displayed and easily accessible to all users, regardless of their location or browsing habits. Evidence: Proceedings on Privacy Enhancing Technologies (2021).
Why does "Privacy Link Placement Impacts User Compliance with CCPA Regulations" matter for design?
For designers, understanding how users interact with privacy controls is crucial for building trust and ensuring legal compliance. Poorly implemented privacy features can lead to user frustration and potential legal repercussions for the organization.
How can designers apply this research?
Ensure that legally mandated privacy controls, like 'Do Not Sell My Personal Information' links, are prominently displayed and easily accessible to all users, regardless of their location or browsing habits.
What were the main findings?
A significant portion of websites did not comply with the minimum requirements for DNSMPI links.. Websites employed various strategies, including geofencing, to limit the visibility of these links to specific user demographics.. The presentation of DNSMPI links varied widely, impacting their discoverability.
What research method was used?
Observational Study / Longitudinal Data Analysis with Top 1 million websites.
How strong is the evidence?
Evidence strength is rated Strong effect, based on a 2021 journal from Proceedings on Privacy Enhancing Technologies.
What should I do differently in my next project?
When designing websites or digital products, conduct an audit of all privacy-related links and controls to ensure they are easily discoverable and understandable by the target audience.
What are the limitations?
The study focused solely on DNSMPI links and did not assess other aspects of CCPA compliance. Compliance may vary across different regions and over time beyond the study period.
Is there evidence that sell personal affects design outcomes?
Many websites failed to adequately display the required 'Do Not Sell My Personal Information' links, and some actively tried to hide them from users, indicating a gap in compliance and user accessibility. For designers, understanding how users interact with privacy controls is crucial for building trust and ensuring le Source: Proceedings on Privacy Enhancing Technologies (2021).
Where does this personal information research apply?
Web design and online privacy compliance It sits within user-centred design research on designdex.org.

Related research topics

sell personal design research · evidence on sell personal · does sell personal improve design outcomes · personal information studies for designers · sell personal and personal information findings · user-centred design research evidence