{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,16]],"date-time":"2026-04-16T12:35:29Z","timestamp":1776342929356,"version":"3.51.2"},"publisher-location":"Cham","reference-count":45,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030551957","type":"print"},{"value":"9783030551964","type":"electronic"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-55196-4_10","type":"book-chapter","created":{"date-parts":[[2020,10,14]],"date-time":"2020-10-14T23:11:38Z","timestamp":1602717098000},"page":"163-185","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":13,"title":["Purposes in IAB Europe\u2019s TCF: Which Legal Basis and How Are They Used by\u00a0Advertisers?"],"prefix":"10.1007","author":[{"given":"C\u00e9lestin","family":"Matte","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cristiana","family":"Santos","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nataliia","family":"Bielova","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,10,15]]},"reference":[{"key":"10_CR1","unstructured":"AP (Dutch DPA), Standard explanation of the basis of the legitimate interest"},{"key":"10_CR2","unstructured":"Article 29 Working Party, EDPB opinion 4\/2007 on the concept of personal data (WP136). Accessed 20 July 2007"},{"key":"10_CR3","unstructured":"Article 29 Working Party, Guidelines on automated individual decision-making and profiling for the purposes of regulation 2016\/679 (WP251 rev.01)"},{"key":"10_CR4","unstructured":"Article 29 Working Party, Opinion 03\/2013 on purpose limitation (WP203)"},{"key":"10_CR5","unstructured":"Article 29 Working Party, Opinion 04\/2012 on cookie consent exemption (WP 194). Accessed 7 June 2012"},{"key":"10_CR6","unstructured":"Article 29 Working Party, Opinion 06\/2014 on the notion of legitimate interests of the data controller under article 7 of directive 95\/46\/EC (WP217)"},{"key":"10_CR7","unstructured":"Article 29 Working Party, Working document 02\/2013 providing guidance on obtaining consent for cookies"},{"key":"10_CR8","unstructured":"Article 29 Working Party, Opinion 13\/2011 on Geolocation services on smart mobile devices (WP 185) (2011). Accessed 16 May 2011"},{"key":"10_CR9","unstructured":"Article 29 Working Party, Guidelines on Consent under Regulation 2016\/679 (wp259rev.01) (2016)"},{"key":"10_CR10","unstructured":"Article 29 Working Party, Guidelines on transparency under Regulation 2016\/679 (WP260 rev.01) (2018). Accessed 11 April 2018"},{"key":"10_CR11","unstructured":"Attachments to the paper (dropbox repository). \nhttps:\/\/www.dropbox.com\/sh\/0g1qlsaatc8yplz\/AACAaFLJNrwRH3eWRmGm_zqsa?dl=0"},{"key":"10_CR12","unstructured":"BfDI (German DPA), Guidance from German authorities for telemedia providers"},{"key":"10_CR13","unstructured":"Centre for Information Policy Leadership, CIPL examples of legitimate interest grounds for processing of personal data"},{"key":"10_CR14","unstructured":"CNIL, D\u00e9cision n MED 2018\u2013042 du 30 octobre 2018 mettant en demeure la soci\u00e9t\u00e9 VECTAURY (2018)"},{"key":"10_CR15","unstructured":"D\u00e9cision n MED 2018\u2013042, D\u00e9lib\u00e9ration n 2019\u2013093 du 4 juillet 2019 portant adoption de lignes directrices relatives \u00e0 l\u2019application de l\u2019article 82 de la loi du 6 janvier 1978 modifi\u00e9e aux op\u00e9rations de lecture ou \u00e9criture dans le terminal d\u2019un utilisateur (notamment aux cookies et autres traceurs) (rectificatif) (2019)"},{"key":"10_CR16","unstructured":"Decision of the conference of independent data protection supervisors of the federal and state governments - 07.11.20191, Datenshutzkonferenz"},{"key":"10_CR17","doi-asserted-by":"crossref","unstructured":"Degeling, M., Utz, C., Lentzsch, C., Hosseini, H., Schaub, F., Holz, T.: We value your privacy... now take some cookies: measuring the GDPR\u2019s impact on web privacy. In: Network and Distributed System Security Symposium (NDSS) (2019)","DOI":"10.14722\/ndss.2019.23378"},{"key":"10_CR18","unstructured":"Judgement of the court of justice of the EU, Case c-673\/17"},{"key":"10_CR19","unstructured":"Directive 2009\/136\/ec of the european parliament and of the council of 25 november 2009 amending directive 2002\/22\/ec on universal service and users\u2019 rights relating to electronic communications networks and services"},{"key":"10_CR20","unstructured":"Judgment of the court (second chamber) of 4 May 2017, Case C-13\/16"},{"key":"10_CR21","unstructured":"European Data Protection Board (EDPB), Guidelines 2\/2019 on the processing of personal data under article 6(1)(b) gdpr in the context of the provision of online services to data subjects"},{"key":"10_CR22","unstructured":"European Data Protection Board (EDPB), Guidelines on consent under regulation 2016\/679 (wp259 rev.01). Accessed 10 April 2018"},{"key":"10_CR23","unstructured":"European Parliament, the Council and the Commission, Charter of Fundamental Rights of the European Union, Official Journal of the European Communities, 18 December 2000 (2000\/C 364\/01)"},{"key":"10_CR24","unstructured":"Forbrukerr\u00e5det, Out of control - how consumers are exploited by the online advertising industry (2020)"},{"key":"10_CR25","unstructured":"Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (2016)"},{"key":"10_CR26","unstructured":"IAB Europe, IAB europe transparency & consent framework policies. \nhttps:\/\/iabeurope.eu\/wp-content\/uploads\/2019\/08\/IABEurope_TransparencyConsentFramework_v1-1_policy_FINAL.pdf\n\n. Accessed 20 Nov 2019"},{"key":"10_CR27","unstructured":"IAB Europe transparency & consent framework policies, IAB Europe transparency & consent framework policies. \nhttps:\/\/iabeurope.eu\/wp-content\/uploads\/2019\/08\/TransparencyConsentFramework_PoliciesVersion_TCFv2-0_2019-08-21.3_FINAL-1-1.pdf\n\n. Accessed 21 Jan 2020"},{"key":"10_CR28","unstructured":"IAB Europe transparency & consent framework policies, Transparency and consent framework (2018). \nhttps:\/\/github.com\/InteractiveAdvertisingBureau\/GDPR-Transparency-and-Consent-Framework"},{"key":"10_CR29","unstructured":"IAB Europe transparency & consent framework policies, Transparency and consent framework (v2), August 2019. \nhttps:\/\/github.com\/InteractiveAdvertisingBureau\/GDPR-Transparency-and-Consent-Framework\/tree\/master\/TCFv2"},{"key":"10_CR30","unstructured":"IAB Europe transparency & consent framework policies, Dates you need to know for the TCF V2.0 switchover (2020). \nhttps:\/\/iabeurope.eu\/tcf-2\/dates-you-need-to-know-for-the-tcf-v2-0-switchover\/"},{"key":"10_CR31","unstructured":"IAB Europe and IAB Tech Lab, Global vendor list (GVL, v1.1, version 183), January 2020. \nhttps:\/\/vendorlist.consensu.org\/v-183\/vendorlist.json"},{"key":"10_CR32","unstructured":"IAB Europe and IAB Tech Lab, Global vendor list (GVL, v2.0, version 20), January 2020 .\nhttps:\/\/vendorlist.consensu.org\/v2\/archives\/vendor-list-v20.json"},{"key":"10_CR33","unstructured":"IAB Tech Lab and IAB Europe, Transparency and consent string with global vendor & CMP list formats, December 2019. \nhttps:\/\/github.com\/InteractiveAdvertisingBureau\/GDPR-Transparency-and-Consent-Framework\/blob\/master\/TCFv2\/IAB%20Tech%20Lab%20-%20Consent%20string%20and%20vendor%20list%20formats%20v2.md#the-core-string"},{"key":"10_CR34","unstructured":"ICO, ICO report into adtech and real time bidding. Accessed 20 June 2019"},{"key":"10_CR35","unstructured":"ICO report into adtech and real time bidding, Lawful basis for processing legitimate interests (2018)"},{"key":"10_CR36","unstructured":"ICO report into adtech and real time bidding, Guidance on the use of cookies and similar technologies, July 2019"},{"issue":"2","key":"10_CR37","doi-asserted-by":"publisher","first-page":"171","DOI":"10.5235\/175214611797885701","volume":"5","author":"B-J Koops","year":"2011","unstructured":"Koops, B.-J.: The (in) flexibility of techno-regulation and the case of purpose-binding. Legisprudence 5(2), 171\u2013194 (2011)","journal-title":"Legisprudence"},{"key":"10_CR38","doi-asserted-by":"crossref","unstructured":"Matte, C., Bielova, N., Santos, C.: Do cookie banners respect my choice? measuring legal compliance of banners from IAB Europe\u2019s transparency and consent framework. In: IEEE Symposium on Security and Privacy (IEEE S&P 2020) (2020)","DOI":"10.1109\/SP40000.2020.00076"},{"key":"10_CR39","doi-asserted-by":"crossref","unstructured":"Nouwens, M., Liccardi, I., Veale, M., Karger, D., Kagal, L.: Dark patterns after the GDPR: scraping consent pop-ups and demonstrating their influence. In: Conference on Human Factors in Computing Systems (CHI 2020) (2020)","DOI":"10.1145\/3313831.3376321"},{"key":"10_CR40","unstructured":"Panoptykon Foundation, Panoptykon files complaints against Google and IAB Europe (2019). \nhttps:\/\/en.panoptykon.org\/complaints-Google-IAB"},{"key":"10_CR41","unstructured":"Ryan, J.: French regulator shows deep flaws in IAB\u2019s consent framework and RTB (2018). \nhttps:\/\/brave.com\/cnil-consent-rtb\/\n\n. Accessed 28 Mar 2019"},{"key":"10_CR42","unstructured":"French regulator shows deep flaws in IAB\u2019s consent framework and RTB, Regulatory complaint concerning massive, web-wide data breach by google and other \u201cad tech\u201d companies under europe\u2019s gdpr (2018). \nhttps:\/\/brave.com\/adtech-data-breach-complaint\/\n\n. Accessed 02 May 2020"},{"key":"10_CR43","unstructured":"French regulator shows deep flaws in IAB\u2019s consent framework and RTB, Brave answers us senators questions on privacy and antitrust (2019). \nhttps:\/\/brave.com\/senate-qrfs-june2019\/\n\n. Accessed 02 May 2020"},{"key":"10_CR44","unstructured":"Santos, C., Bielova, N., Matte, C.: Are cookie banners indeed compliant with the law? deciphering eu legal requirements on consent and technical means to verify compliance of cookie banners, ArXiv, vol. abs\/1912.07144 (2019)"},{"key":"10_CR45","doi-asserted-by":"crossref","unstructured":"von Grafenstein, M.: The Principle of Purpose Limitation in Data Protection Laws: The Risk-Based Approach, Principles, and Private Standards as Elements for Regulating Innovation, 1st edn. Nomos Verlagsgesellschaft mbH (2018)","DOI":"10.5771\/9783845290843-1"}],"container-title":["Lecture Notes in Computer Science","Privacy Technologies and Policy"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-55196-4_10","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,10,14]],"date-time":"2020-10-14T23:28:01Z","timestamp":1602718081000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-55196-4_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030551957","9783030551964"],"references-count":45,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-55196-4_10","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"15 October 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"APF","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Annual Privacy Forum","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Lisbon","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Portugal","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 June 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5 June 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"apf2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/privacyforum.eu\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"59","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"12","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"20% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"https:\/\/privacyforum.eu\/","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}