{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,10]],"date-time":"2026-01-10T03:33:09Z","timestamp":1768015989068,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":83,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,11,15]],"date-time":"2021-11-15T00:00:00Z","timestamp":1636934400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"ANR JCJC project PrivaWeb","award":["ANR-18-CE39-0008"],"award-info":[{"award-number":["ANR-18-CE39-0008"]}]},{"name":"DATA4US Exploratory Action"},{"name":"ANSWERproject PIA FSN2","award":["No. P159564-2661789\/ DOS0060094"],"award-info":[{"award-number":["No. P159564-2661789\/ DOS0060094"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,11,15]]},"DOI":"10.1145\/3463676.3485603","type":"proceedings-article","created":{"date-parts":[[2021,11,5]],"date-time":"2021-11-05T22:07:38Z","timestamp":1636150058000},"page":"151-166","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":13,"title":["In-Depth Technical and Legal Analysis of Tracking on Health Related Websites with ERNIE Extension"],"prefix":"10.1145","author":[{"given":"Vera","family":"Wesselkamp","sequence":"first","affiliation":[{"name":"Inria, Sophia Antipolis, France"}]},{"given":"Imane","family":"Fouad","sequence":"additional","affiliation":[{"name":"Inria, Sophia Antipolis, France"}]},{"given":"Cristiana","family":"Santos","sequence":"additional","affiliation":[{"name":"Utrecht University, Utrecht, Netherlands"}]},{"given":"Yanis","family":"Boussad","sequence":"additional","affiliation":[{"name":"Inria, Sophia Antipolis, France"}]},{"given":"Nataliia","family":"Bielova","sequence":"additional","affiliation":[{"name":"CNIL & Inria, Paris, France"}]},{"given":"Arnaud","family":"Legout","sequence":"additional","affiliation":[{"name":"Inria, Sophia Antipolis, France"}]}],"member":"320","published-online":{"date-parts":[[2021,11,15]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"Alexa Top Sites. https:\/\/www.alexa.com\/topsites.  Alexa Top Sites. https:\/\/www.alexa.com\/topsites."},{"key":"e_1_3_2_2_2_1","unstructured":"Alexa websites visited. https:\/\/www.dropbox.com\/sh\/nwjw7ggcx08o1x7\/ AACYrHqsxo7DcZjbVArE5Fxua?dl=0.  Alexa websites visited. https:\/\/www.dropbox.com\/sh\/nwjw7ggcx08o1x7\/ AACYrHqsxo7DcZjbVArE5Fxua?dl=0."},{"key":"e_1_3_2_2_3_1","unstructured":"Contextual Identities. https:\/\/developer.mozilla.org\/en-US\/docs\/Mozilla\/Add- ons\/WebExtensions\/API\/contextualIdentities.  Contextual Identities. https:\/\/developer.mozilla.org\/en-US\/docs\/Mozilla\/Add- ons\/WebExtensions\/API\/contextualIdentities."},{"key":"e_1_3_2_2_4_1","unstructured":"Cookie Guide. https:\/\/developers.google.com\/authorized-buyers\/rtb\/cookie-guide.  Cookie Guide. https:\/\/developers.google.com\/authorized-buyers\/rtb\/cookie-guide."},{"key":"e_1_3_2_2_5_1","unstructured":"Enhanced tracking protection in Firefox for desktop. https:\/\/support.mozilla.org\/ en-US\/kb\/enhanced-tracking-protection-firefox-desktop.  Enhanced tracking protection in Firefox for desktop. https:\/\/support.mozilla.org\/ en-US\/kb\/enhanced-tracking-protection-firefox-desktop."},{"key":"e_1_3_2_2_6_1","unstructured":"Google Cookie Types. https:\/\/policies.google.com\/technologies\/types.  Google Cookie Types. https:\/\/policies.google.com\/technologies\/types."},{"key":"e_1_3_2_2_7_1","unstructured":"List of websites visited. https:\/\/www.dropbox.com\/s\/l1ebx791ipp12xn\/visited_ urls.txt?dl=0.  List of websites visited. https:\/\/www.dropbox.com\/s\/l1ebx791ipp12xn\/visited_ urls.txt?dl=0."},{"key":"e_1_3_2_2_8_1","unstructured":"Pupeteer. https:\/\/github.com\/puppeteer\/puppeteer.  Pupeteer. https:\/\/github.com\/puppeteer\/puppeteer."},{"key":"e_1_3_2_2_9_1","unstructured":"Guidance on the use of cookies and similar technologies 2019. https:\/\/ico.org.uk\/media\/for-organisations\/guide-to-pecr\/guidance-on-the-use-of-cookies-and-similar-technologies-1-0.pdf.  Guidance on the use of cookies and similar technologies 2019. https:\/\/ico.org.uk\/media\/for-organisations\/guide-to-pecr\/guidance-on-the-use-of-cookies-and-similar-technologies-1-0.pdf."},{"key":"e_1_3_2_2_10_1","unstructured":"Judgment in Case C-673\/17 Bundesverband der Verbraucherzentralen und Ver- braucherverb\u00e4nde -- Verbraucherzentrale Bundesverband eV v Planet49 GmbH 2019. http:\/\/curia.europa.eu\/juris\/documents.jsf?num=C-673\/17.  Judgment in Case C-673\/17 Bundesverband der Verbraucherzentralen und Ver- braucherverb\u00e4nde -- Verbraucherzentrale Bundesverband eV v Planet49 GmbH 2019. http:\/\/curia.europa.eu\/juris\/documents.jsf?num=C-673\/17."},{"key":"e_1_3_2_2_11_1","unstructured":"118000.fr website. https:\/\/www.118000.fr\/v_paris_75\/c_gynecologue-obstetricien-medecin-specialiste-en-gynecologie-obstetrique.  118000.fr website. https:\/\/www.118000.fr\/v_paris_75\/c_gynecologue-obstetricien-medecin-specialiste-en-gynecologie-obstetrique."},{"key":"e_1_3_2_2_12_1","volume-title":"Adopted on","author":"Privacy WP","year":"2016","unstructured":"29 WP Opinion 03\/2016 on the evaluation and review of the e Privacy Directive (2002\/58\/EC) , Adopted on 19 July 2016 ,. https:\/\/ec.europa.eu\/justice\/article- 29\/documentation\/opinion-recommendation\/files\/2016\/wp240_en.pdf. 29WP Opinion 03\/2016 on the evaluation and review of the ePrivacy Directive (2002\/58\/EC), Adopted on 19 July 2016,. https:\/\/ec.europa.eu\/justice\/article- 29\/documentation\/opinion-recommendation\/files\/2016\/wp240_en.pdf."},{"key":"e_1_3_2_2_13_1","first-page":"674","volume-title":"Claudia D\u00edaz. The Web Never Forgets: Persistent Tracking Mechanisms in the Wild. In Proceedings of the ACM SIGSAC Conference on Computer and Communications Security","author":"Acar Gunes","year":"2014","unstructured":"Gunes Acar , Christian Eubank , Steven Englehardt , Marc Ju\u00e1rez , Arvind Narayanan , and Claudia D\u00edaz. The Web Never Forgets: Persistent Tracking Mechanisms in the Wild. In Proceedings of the ACM SIGSAC Conference on Computer and Communications Security , pages 674 -- 689 , 2014 . Gunes Acar, Christian Eubank, Steven Englehardt, Marc Ju\u00e1rez, Arvind Narayanan, and Claudia D\u00edaz. The Web Never Forgets: Persistent Tracking Mechanisms in the Wild. In Proceedings of the ACM SIGSAC Conference on Computer and Communications Security, pages 674--689, 2014."},{"key":"e_1_3_2_2_14_1","unstructured":"Guide on use of cookies 2021. https:\/\/www.aepd.es\/sites\/default\/files\/2021- 01\/guia-cookies-en.pdf.  Guide on use of cookies 2021. https:\/\/www.aepd.es\/sites\/default\/files\/2021- 01\/guia-cookies-en.pdf."},{"key":"e_1_3_2_2_15_1","unstructured":"Article 29 Working Party. Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016\/679 (WP251 rev.01).  Article 29 Working Party. Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016\/679 (WP251 rev.01)."},{"key":"e_1_3_2_2_16_1","unstructured":"Article 29 Working Party. Guidelines on Personal data breach notification under Regulation 2016\/679. https:\/\/ec.europa.eu\/newsroom\/article29\/items\/612052\/en.  Article 29 Working Party. Guidelines on Personal data breach notification under Regulation 2016\/679. https:\/\/ec.europa.eu\/newsroom\/article29\/items\/612052\/en."},{"key":"e_1_3_2_2_17_1","unstructured":"Article 29 Working Party. Opinion 04\/2012 on Cookie Consent Exemption (WP 194).  Article 29 Working Party. Opinion 04\/2012 on Cookie Consent Exemption (WP 194)."},{"key":"e_1_3_2_2_18_1","unstructured":"Article 29 Working Party. WP 248 Guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is ?likely to result in a high risk\" for the purposes of Regulation 2016\/679.  Article 29 Working Party. WP 248 Guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is ?likely to result in a high risk\" for the purposes of Regulation 2016\/679."},{"key":"e_1_3_2_2_19_1","unstructured":"Bing policy. https:\/\/www.timeshighereducation.com\/cookie-policy.  Bing policy. https:\/\/www.timeshighereducation.com\/cookie-policy."},{"key":"e_1_3_2_2_20_1","volume-title":"Adopted on","author":"Protection Board European Data","year":"2020","unstructured":"European Data Protection Board . Guidelines 03\/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak , Adopted on 21 April 2020 . https:\/\/edpb.europa.eu\/sites\/default\/files\/files\/file1\/edpb_guidelines_ 202003_healthdatascientificresearchcovid19_en.pdf. European Data Protection Board. Guidelines 03\/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak, Adopted on 21 April 2020. https:\/\/edpb.europa.eu\/sites\/default\/files\/files\/file1\/edpb_guidelines_ 202003_healthdatascientificresearchcovid19_en.pdf."},{"key":"e_1_3_2_2_21_1","volume-title":"Unveiling and Quantifying Facebook Exploitation of Sensitive Personal Data for Advertising Purposes. In USENIX Security Symposium","author":"Caba\u00f1as J.","year":"2018","unstructured":"J. Caba\u00f1as , \u00c1ngel Cuevas , and R. C. Rum\u00edn . Unveiling and Quantifying Facebook Exploitation of Sensitive Personal Data for Advertising Purposes. In USENIX Security Symposium , 2018 . J. Caba\u00f1as, \u00c1ngel Cuevas, and R. C. Rum\u00edn. Unveiling and Quantifying Facebook Exploitation of Sensitive Personal Data for Advertising Purposes. In USENIX Security Symposium, 2018."},{"key":"e_1_3_2_2_22_1","volume-title":"https:\/\/docs.microsoft.com\/en-us\/clarity\/cookie- list, accesed 16","author":"Cookie List Microsoft Clarity","year":"2021","unstructured":"Microsoft Clarity Cookie List . https:\/\/docs.microsoft.com\/en-us\/clarity\/cookie- list, accesed 16 . July 2021 . Microsoft Clarity Cookie List. https:\/\/docs.microsoft.com\/en-us\/clarity\/cookie- list, accesed 16. July 2021."},{"key":"e_1_3_2_2_23_1","unstructured":"CNIL\n  : D\u00e9lib\u00e9ration de la formation restreinte n\u00b0san-2020-008 du 18 novembre 2020 concernant la soci\u00e9t\u00e9 CARREFOUR FRANCE. https:\/\/www.legifrance.gouv. fr\/cnil\/id\/CNILTEXT000042563756. Accessed on 19 March 2021.  CNIL: D\u00e9lib\u00e9ration de la formation restreinte n\u00b0san-2020-008 du 18 novembre 2020 concernant la soci\u00e9t\u00e9 CARREFOUR FRANCE. https:\/\/www.legifrance.gouv. fr\/cnil\/id\/CNILTEXT000042563756. Accessed on 19 March 2021."},{"key":"e_1_3_2_2_24_1","volume-title":"Accessed on","author":"\u00e9e","year":"2021","unstructured":"Qu'est-ce ce qu'une donn \u00e9e de sant\u00e9? https:\/\/www.cnil.fr\/fr\/quest-ce-ce-quune- donnee-de-sante. Accessed on 18 May 2021 . Qu'est-ce ce qu'une donn\u00e9e de sant\u00e9? https:\/\/www.cnil.fr\/fr\/quest-ce-ce-quune- donnee-de-sante. Accessed on 18 May 2021."},{"key":"e_1_3_2_2_25_1","volume-title":"version in effect as of","author":"Code","year":"2021","unstructured":"Code de la sant\u00e9 publique , version in effect as of February 27, 2021 . https: \/\/www.legifrance.gouv.fr\/codes\/article_lc\/LEGIARTI000036515027\/. Translated with DeepL https:\/\/www.deepl.com on February 27, 2021. Code de la sant\u00e9 publique, version in effect as of February 27, 2021. https: \/\/www.legifrance.gouv.fr\/codes\/article_lc\/LEGIARTI000036515027\/. Translated with DeepL https:\/\/www.deepl.com on February 27, 2021."},{"key":"e_1_3_2_2_26_1","volume-title":"French guidelines on cookies: Deliberation No 2020-091 of","author":"Commission Nationale de l'Informatique et des Libert\u00e9s (French DPA).","year":"2020","unstructured":"Commission Nationale de l'Informatique et des Libert\u00e9s (French DPA). French guidelines on cookies: Deliberation No 2020-091 of September 17, 2020 adopting guidelines relating to the application of article 82 of the law of January 6, 1978 amended to read and write operations in a user's terminal (in particular to \"cookies and other tracers\"), 2020. https:\/\/www.legifrance.gouv.fr\/jorf\/id\/ JORFTEXT000042388179. Commission Nationale de l'Informatique et des Libert\u00e9s (French DPA). French guidelines on cookies: Deliberation No 2020-091 of September 17, 2020 adopting guidelines relating to the application of article 82 of the law of January 6, 1978 amended to read and write operations in a user's terminal (in particular to \"cookies and other tracers\"), 2020. https:\/\/www.legifrance.gouv.fr\/jorf\/id\/ JORFTEXT000042388179."},{"key":"e_1_3_2_2_27_1","unstructured":"Consent-O-Matic browser extension. matic\/mdjildafknihdffpkfmmpnpoiajf jnjd.  Consent-O-Matic browser extension. matic\/mdjildafknihdffpkfmmpnpoiajf jnjd."},{"key":"e_1_3_2_2_28_1","unstructured":"Cookiebot. Cookie Scanner for GDPR\/ePR and CCPA Compliance. https:\/\/www. cookiebot.com\/en\/cookie-scanner\/.  Cookiebot. Cookie Scanner for GDPR\/ePR and CCPA Compliance. https:\/\/www. cookiebot.com\/en\/cookie-scanner\/."},{"key":"e_1_3_2_2_29_1","unstructured":"Court of Justice of the EU. C-101\/01 LINDQUIST 6.11.2003 ECLI:EU:C: 2003:596. https:\/\/curia.europa.eu\/juris\/liste.jsf?num=C-101\/01.  Court of Justice of the EU. C-101\/01 LINDQUIST 6.11.2003 ECLI:EU:C:2003:596. https:\/\/curia.europa.eu\/juris\/liste.jsf?num=C-101\/01."},{"key":"e_1_3_2_2_30_1","unstructured":"Martin Degeling Christine Utz Christopher Lentzsch Henry Hosseini Florian Schaub and Thorsten Holz. We Value Your Privacy... Now Take Some Cookies: Measuring the GDPR's Impact on Web Privacy.  Martin Degeling Christine Utz Christopher Lentzsch Henry Hosseini Florian Schaub and Thorsten Holz. We Value Your Privacy... Now Take Some Cookies: Measuring the GDPR's Impact on Web Privacy."},{"key":"e_1_3_2_2_31_1","unstructured":"Dermatologie-weissensee.de website. https:\/\/www.dermatologie-weissensee.de\/ termine\/.  Dermatologie-weissensee.de website. https:\/\/www.dermatologie-weissensee.de\/ termine\/."},{"key":"e_1_3_2_2_32_1","unstructured":"Disconnect Official website. https:\/\/disconnect.me\/.  Disconnect Official website. https:\/\/disconnect.me\/."},{"key":"e_1_3_2_2_33_1","unstructured":"Guidance note on the use of cookies and other tracking technologies 2020. https:\/\/www.dataprotection.ie\/sites\/default\/files\/uploads\/2020-04\/Guidance% 20note%20on%20cookies%20and%20other%20tracking%20technologies.pdf .  Guidance note on the use of cookies and other tracking technologies 2020. https:\/\/www.dataprotection.ie\/sites\/default\/files\/uploads\/2020-04\/Guidance% 20note%20on%20cookies%20and%20other%20tracking%20technologies.pdf ."},{"key":"e_1_3_2_2_34_1","unstructured":"Report by the Data Protection Commission on the use of cookies and other tracking technologies 2016. https:\/\/www.dataprotection.ie\/sites\/default\/files\/ uploads\/2020-04\/Report%20by%20the%20DPC%20on%20the%20use%20of%20cookies%20and%20other%20tracking%20technologies.pdf.  Report by the Data Protection Commission on the use of cookies and other tracking technologies 2016. https:\/\/www.dataprotection.ie\/sites\/default\/files\/ uploads\/2020-04\/Report%20by%20the%20DPC%20on%20the%20use%20of%20cookies%20and%20other%20tracking%20technologies.pdf."},{"key":"e_1_3_2_2_35_1","unstructured":"EFF. Privacy Badger. https:\/\/privacybadger.org\/.  EFF. Privacy Badger. https:\/\/privacybadger.org\/."},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978313"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2736277.2741679"},{"key":"e_1_3_2_2_38_1","unstructured":"Directive 2009\/136\/EC of the European Parliament and of the Council of 25 November 2009 amending Directive 2002\/22\/EC on universal service and users' rights relating to electronic communications networks and services Directive 2002\/58\/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector and Regulation (EC) No 2006\/2004 on cooperation between national authorities responsible for the enforcement of consumer protection laws (Text with EEA relevance). Directive 2009\/136\/EC 2009. https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=celex%3A32009L0136.  Directive 2009\/136\/EC of the European Parliament and of the Council of 25 November 2009 amending Directive 2002\/22\/EC on universal service and users' rights relating to electronic communications networks and services Directive 2002\/58\/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector and Regulation (EC) No 2006\/2004 on cooperation between national authorities responsible for the enforcement of consumer protection laws (Text with EEA relevance). Directive 2009\/136\/EC 2009. https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=celex%3A32009L0136."},{"key":"e_1_3_2_2_39_1","unstructured":"European Data Protection Board. Opinion 4\/2007 on the concept of personal data (WP 136) adopted on 20.06.2007. https:\/\/ec.europa.eu\/justice\/article-29\/documentation\/opinionrecommendation\/files\/2007\/wp136_en.pdf .  European Data Protection Board. Opinion 4\/2007 on the concept of personal data (WP 136) adopted on 20.06.2007. https:\/\/ec.europa.eu\/justice\/article-29\/documentation\/opinionrecommendation\/files\/2007\/wp136_en.pdf ."},{"key":"e_1_3_2_2_40_1","volume-title":"adopted on","author":"Protection Board European Data","year":"2020","unstructured":"European Data Protection Board . Guidelines 05\/2020 on consent, Version 1.1 , adopted on 4 May 2020 , 2020. https:\/\/edpb.europa.eu\/sites\/edpb\/files\/files\/file1\/ edpb_guidelines_202005_consent_en.pdf. European Data Protection Board. Guidelines 05\/2020 on consent, Version 1.1, adopted on 4 May 2020, 2020. https:\/\/edpb.europa.eu\/sites\/edpb\/files\/files\/file1\/ edpb_guidelines_202005_consent_en.pdf."},{"key":"e_1_3_2_2_41_1","unstructured":"European Data Protection Board (EDPB). Opinion 2\/2010 on online behavioural advertising 22 June 2010 WP171 p. 10.  European Data Protection Board (EDPB). Opinion 2\/2010 on online behavioural advertising 22 June 2010 WP171 p. 10."},{"key":"e_1_3_2_2_42_1","unstructured":"European Data Protection Board (EDPB). Guidelines 05\/2020 on consent under Regulation 2016\/679 2020.  European Data Protection Board (EDPB). Guidelines 05\/2020 on consent under Regulation 2016\/679 2020."},{"key":"e_1_3_2_2_43_1","unstructured":"EZIGDPR. GDPR Website Compliance Check. https:\/\/www.ezigdpr.com\/products\/gdpr-website-compliance-checker.  EZIGDPR. GDPR Website Compliance Check. https:\/\/www.ezigdpr.com\/products\/gdpr-website-compliance-checker."},{"key":"e_1_3_2_2_44_1","unstructured":"Facebook Privacy Policy. https:\/\/www.facebook.com\/policies\/cookies.  Facebook Privacy Policy. https:\/\/www.facebook.com\/policies\/cookies."},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2020-0038"},{"key":"e_1_3_2_2_46_1","volume-title":"Stefano Calzavara. On Compliance of Cookie Purposes with the Purpose Specification Principle. In 2020 International Workshop on Privacy Engineering, IWPE","author":"Fouad Imane","year":"2020","unstructured":"Imane Fouad , Cristiana Santos , Feras Al Kassar , Nataliia Bielova , and Stefano Calzavara. On Compliance of Cookie Purposes with the Purpose Specification Principle. In 2020 International Workshop on Privacy Engineering, IWPE , 2020 . https:\/\/hal.inria.fr\/hal-02567022. Imane Fouad, Cristiana Santos, Feras Al Kassar, Nataliia Bielova, and Stefano Calzavara. On Compliance of Cookie Purposes with the Purpose Specification Principle. In 2020 International Workshop on Privacy Engineering, IWPE, 2020. https:\/\/hal.inria.fr\/hal-02567022."},{"key":"e_1_3_2_2_47_1","unstructured":"Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation) (Text with EEA relevance). https: \/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=celex:32016R0679.  Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation) (Text with EEA relevance). https: \/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=celex:32016R0679."},{"key":"e_1_3_2_2_48_1","unstructured":"Ghostery Official website. https:\/\/www.ghostery.com\/.  Ghostery Official website. https:\/\/www.ghostery.com\/."},{"key":"e_1_3_2_2_49_1","volume-title":"https:\/\/help.sap.com\/ viewer\/8b8d6fffe113457094a17701f63e3d6a\/GIGYA\/en-US\/ 41419ee070b21014bbc5a10ce4041860.html, accessed 16","author":"Advanced Cookie Reference SAP","year":"2021","unstructured":"SAP Advanced Cookie Reference . https:\/\/help.sap.com\/ viewer\/8b8d6fffe113457094a17701f63e3d6a\/GIGYA\/en-US\/ 41419ee070b21014bbc5a10ce4041860.html, accessed 16 . July 2021 . SAP Advanced Cookie Reference. https:\/\/help.sap.com\/ viewer\/8b8d6fffe113457094a17701f63e3d6a\/GIGYA\/en-US\/ 41419ee070b21014bbc5a10ce4041860.html, accessed 16. July 2021."},{"key":"e_1_3_2_2_50_1","unstructured":"Google analytics solutions. https:\/\/www.google.com\/analytics.  Google analytics solutions. https:\/\/www.google.com\/analytics."},{"key":"e_1_3_2_2_51_1","unstructured":"Google.com cookie usage. https:\/\/developers.google.com\/analytics\/devguides\/ collection\/analyticsjs\/cookie-usage.  Google.com cookie usage. https:\/\/developers.google.com\/analytics\/devguides\/ collection\/analyticsjs\/cookie-usage."},{"key":"e_1_3_2_2_52_1","unstructured":"Google policy. hhttps:\/\/policies.google.com\/technologies\/cookies?hl=en-US.  Google policy. hhttps:\/\/policies.google.com\/technologies\/cookies?hl=en-US."},{"key":"e_1_3_2_2_53_1","volume-title":"Damien Clifford. Dark Patterns and the Legal Requirements of Consent Banners: An Interaction Criticism Perspective. In ACM CHI 2021, 2020","author":"Gray Colin","year":"2009","unstructured":"Colin Gray , Cristiana Santos , Nataliia Bielova , Michael Toth , and Damien Clifford. Dark Patterns and the Legal Requirements of Consent Banners: An Interaction Criticism Perspective. In ACM CHI 2021, 2020 . https:\/\/arxiv.org\/abs\/ 2009 .10194. Colin Gray, Cristiana Santos, Nataliia Bielova, Michael Toth, and Damien Clifford. Dark Patterns and the Legal Requirements of Consent Banners: An Interaction Criticism Perspective. In ACM CHI 2021, 2020. https:\/\/arxiv.org\/abs\/2009.10194."},{"key":"e_1_3_2_2_54_1","volume-title":"Guidelines on Cookies and Trackers","author":"Greek DPA","year":"2020","unstructured":"Greek DPA (HDPA). Guidelines on Cookies and Trackers , 2020 . http:\/\/www.dpa.gr\/APDPXPortlets\/htdocs\/documentSDisplay.jsp?docid= 84,221,176,170,98,24,72,223. Greek DPA (HDPA). Guidelines on Cookies and Trackers, 2020. http:\/\/www.dpa.gr\/APDPXPortlets\/htdocs\/documentSDisplay.jsp?docid= 84,221,176,170,98,24,72,223."},{"key":"e_1_3_2_2_55_1","volume-title":"What Patients Like - and Dislike - About Telemedicine. https:\/\/hbr.org\/2020\/12\/what-patients-like-and-dislike-about-telemedicine accessed on","author":"Review Harward Business","year":"2021","unstructured":"Harward Business Review . What Patients Like - and Dislike - About Telemedicine. https:\/\/hbr.org\/2020\/12\/what-patients-like-and-dislike-about-telemedicine accessed on 27 February 2021 . Harward Business Review. What Patients Like - and Dislike - About Telemedicine. https:\/\/hbr.org\/2020\/12\/what-patients-like-and-dislike-about-telemedicine accessed on 27 February 2021."},{"key":"e_1_3_2_2_56_1","unstructured":"Raymond Hill and Contributors. uBlock Origin. https:\/\/github.com\/gorhill\/uBlock\/.  Raymond Hill and Contributors. uBlock Origin. https:\/\/github.com\/gorhill\/uBlock\/."},{"key":"e_1_3_2_2_57_1","volume-title":"Annex 2015), 2015","author":"Information Commission","year":"2015","unstructured":"Information Commission er's Office. Article 29 WP , Annex 2015), 2015 . https:\/\/ec.europa.eu\/justice\/article-29\/documentation\/other-document\/files\/ 2015 \/20150205_letter_art29wp_ec_health_data_after_plenary_annex_en.pdf. Information Commissioner's Office. Article 29 WP, Annex 2015), 2015. https:\/\/ec.europa.eu\/justice\/article-29\/documentation\/other-document\/files\/ 2015\/20150205_letter_art29wp_ec_health_data_after_plenary_annex_en.pdf."},{"key":"e_1_3_2_2_58_1","volume-title":"Update report into adtech and real time bidding. https:\/\/ico.org.uk\/media\/about-the-ico\/documents\/2615156\/adtech-real-time-bidding-report-201906.pdf, accessed on","author":"Information Commission","year":"2019","unstructured":"Information Commission er's Office. Update report into adtech and real time bidding. https:\/\/ico.org.uk\/media\/about-the-ico\/documents\/2615156\/adtech-real-time-bidding-report-201906.pdf, accessed on 2019 .07.10, 2019. Information Commissioner's Office. Update report into adtech and real time bidding. https:\/\/ico.org.uk\/media\/about-the-ico\/documents\/2615156\/adtech-real-time-bidding-report-201906.pdf, accessed on 2019.07.10, 2019."},{"key":"e_1_3_2_2_59_1","volume-title":"Hellenic Data Protection Authority guidance on the use of cookies (and similar technologies)","author":"Information Commission","year":"2020","unstructured":"Information Commission er's Office. Hellenic Data Protection Authority guidance on the use of cookies (and similar technologies) , 2020 . https:\/\/iapp.org\/resources\/article\/cookie-guidance-from-greece\/. Information Commissioner's Office. Hellenic Data Protection Authority guidance on the use of cookies (and similar technologies), 2020. https:\/\/iapp.org\/resources\/article\/cookie-guidance-from-greece\/."},{"key":"e_1_3_2_2_60_1","volume-title":"ICO guide on special category of data","author":"Information Commission","year":"2020","unstructured":"Information Commission er's Office. ICO guide on special category of data , 2020 . https:\/\/ico.org.uk\/for-organisations\/guide-to-data-protection\/guide-to-the-general-data-protection-regulation-gdpr\/special-category-data\/what-is-special-category-data\/#scd5. Information Commissioner's Office. ICO guide on special category of data, 2020. https:\/\/ico.org.uk\/for-organisations\/guide-to-data-protection\/guide-to-the-general-data-protection-regulation-gdpr\/special-category-data\/what-is-special-category-data\/#scd5."},{"key":"e_1_3_2_2_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/2658983"},{"key":"e_1_3_2_2_62_1","unstructured":"LINC. Cookieviz 2: new features to observe hidden web practices. https:\/\/linc. cnil.fr\/fr\/cookieviz-2-new-features-observe-hidden-web-practices.  LINC. Cookieviz 2: new features to observe hidden web practices. https:\/\/linc. cnil.fr\/fr\/cookieviz-2-new-features-observe-hidden-web-practices."},{"key":"e_1_3_2_2_63_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00076"},{"key":"e_1_3_2_2_64_1","unstructured":"McAfee categorization service. https:\/\/www.trustedsource.org\/.  McAfee categorization service. https:\/\/www.trustedsource.org\/."},{"key":"e_1_3_2_2_65_1","unstructured":"Description of McAfee categories. https:\/\/www.trustedsource.org\/download\/ts_ wd_reference_guide.pdf.  Description of McAfee categories. https:\/\/www.trustedsource.org\/download\/ts_ wd_reference_guide.pdf."},{"key":"e_1_3_2_2_66_1","unstructured":"Mozilla. Lightbeam 3.0. https:\/\/addons.mozilla.org\/en-GB\/firefox\/addon\/ lightbeam-3-0\/.  Mozilla. Lightbeam 3.0. https:\/\/addons.mozilla.org\/en-GB\/firefox\/addon\/ lightbeam-3-0\/."},{"key":"e_1_3_2_2_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376321"},{"key":"e_1_3_2_2_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3450056"},{"key":"e_1_3_2_2_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313542"},{"key":"e_1_3_2_2_70_1","volume-title":"Adopted on","author":"Data Protection Working Party Article","year":"2010","unstructured":"Article 29 Data Protection Working Party . Opinion 2\/2010 on online behavioural advertising , Adopted on 22 June 2010 . https:\/\/ec.europa.eu\/justice\/article-29\/ documentation\/opinion-recommendation\/files\/2010\/wp171_en.pdf . Article 29 Data Protection Working Party. Opinion 2\/2010 on online behavioural advertising, Adopted on 22 June 2010. https:\/\/ec.europa.eu\/justice\/article-29\/ documentation\/opinion-recommendation\/files\/2010\/wp171_en.pdf ."},{"key":"e_1_3_2_2_71_1","unstructured":"Piwik. Free Online Cookie Scanner. https:\/\/piwik.pro\/cookie-scanner\/.  Piwik. Free Online Cookie Scanner. https:\/\/piwik.pro\/cookie-scanner\/."},{"key":"e_1_3_2_2_72_1","unstructured":"PrivateVPN website. https:\/\/privatevpn.com\/.  PrivateVPN website. https:\/\/privatevpn.com\/."},{"key":"e_1_3_2_2_73_1","first-page":"340","volume-title":"Proceedings of the ACM Asia Conference Computer and Communications Security","author":"S\u00e1nchez-Rola Iskander","year":"2019","unstructured":"Iskander S\u00e1nchez-Rola , Matteo Dell'Amico , Platon Kotzias , Davide Balzarotti , Leyla Bilge , Pierre-Antoine Vervier , and Igor Santos . Can I Opt Out Yet? : GDPR and the Global Illusion of Cookie Control . In Proceedings of the ACM Asia Conference Computer and Communications Security , pages 340 -- 351 , 2019 . Iskander S\u00e1nchez-Rola, Matteo Dell'Amico, Platon Kotzias, Davide Balzarotti, Leyla Bilge, Pierre-Antoine Vervier, and Igor Santos. Can I Opt Out Yet?: GDPR and the Global Illusion of Cookie Control. In Proceedings of the ACM Asia Conference Computer and Communications Security, pages 340--351, 2019."},{"key":"e_1_3_2_2_74_1","first-page":"91","volume-title":"Are cookie banners indeed compliant with the law? Deciphering EU legal requirements on consent and technical means to verify compliance of cookie banners, journal=Technology and Regulation","author":"Santos Cristiana","year":"2020","unstructured":"Cristiana Santos , Nataliia Bielova , and C\u00e9lestin Matte . Are cookie banners indeed compliant with the law? Deciphering EU legal requirements on consent and technical means to verify compliance of cookie banners, journal=Technology and Regulation . pages 91 -- 135 , 2020 . Cristiana Santos, Nataliia Bielova, and C\u00e9lestin Matte. Are cookie banners indeed compliant with the law? Deciphering EU legal requirements on consent and technical means to verify compliance of cookie banners, journal=Technology and Regulation. pages 91--135, 2020."},{"key":"e_1_3_2_2_75_1","volume-title":"ACM Internet Measurement Conference (ACM IMC 2020)","author":"Srdjan Matic","year":"2020","unstructured":"Matic Srdjan , Iordanou Costas , Smaragdakis Georgios , and Nikolaos Laoutaris . Identifying Sensitive URLs at Web-Scale . In ACM Internet Measurement Conference (ACM IMC 2020) , 2020 . Matic Srdjan, Iordanou Costas, Smaragdakis Georgios, and Nikolaos Laoutaris. Identifying Sensitive URLs at Web-Scale. In ACM Internet Measurement Conference (ACM IMC 2020), 2020."},{"key":"e_1_3_2_2_76_1","unstructured":"Starofservice website. https:\/\/www.starofservice.com\/annubis\/ile-de-france\/ paris\/paris\/pediatrie.  Starofservice website. https:\/\/www.starofservice.com\/annubis\/ile-de-france\/ paris\/paris\/pediatrie."},{"key":"e_1_3_2_2_77_1","unstructured":"European Data Protection Supervisor. EDPS Inspection Software. https:\/\/edps. europa.eu\/press-publications\/edps-inspection-software_en.  European Data Protection Supervisor. EDPS Inspection Software. https:\/\/edps. europa.eu\/press-publications\/edps-inspection-software_en."},{"key":"e_1_3_2_2_78_1","unstructured":"Tribalfusion policy. https:\/\/www.havaianas-store.com\/fr\/Cookies+policy.html.  Tribalfusion policy. https:\/\/www.havaianas-store.com\/fr\/Cookies+policy.html."},{"key":"e_1_3_2_2_79_1","volume-title":"The EU General Data Protection Regulation: A Commentary\/Update of Selected Articles","author":"Uner Christopher","year":"2021","unstructured":"Christopher Uner , Lee A. Bygrave , Christopher Docksey , Laura Drechsler , and Luca Tosoni . The EU General Data Protection Regulation: A Commentary\/Update of Selected Articles . 2021 . https:\/\/global.oup.com\/academic\/product\/the-eu-general-data-protection-regulation-gdpr-9780198826491?cc=pt&lang=en&. Christopher Uner, Lee A. Bygrave, Christopher Docksey, Laura Drechsler, and Luca Tosoni. The EU General Data Protection Regulation: A Commentary\/Update of Selected Articles. 2021. https:\/\/global.oup.com\/academic\/product\/the-eu-general-data-protection-regulation-gdpr-9780198826491?cc=pt&lang=en&."},{"key":"e_1_3_2_2_80_1","doi-asserted-by":"publisher","DOI":"10.1145\/3366423.3380203"},{"key":"e_1_3_2_2_81_1","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355583"},{"key":"e_1_3_2_2_82_1","unstructured":"Webcookies. Web Cookies Scanner. https:\/\/webcookies.org\/.  Webcookies. Web Cookies Scanner. https:\/\/webcookies.org\/."},{"key":"e_1_3_2_2_83_1","volume-title":"Jun","author":"Wolfangel Eva","year":"2021","unstructured":"Eva Wolfangel . Ist Ihr Arzttermin sicher? , Jun 2021 . Eva Wolfangel. Ist Ihr Arzttermin sicher?, Jun 2021."}],"event":{"name":"CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event Republic of Korea","acronym":"CCS '21","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 20th Workshop on Workshop on Privacy in the Electronic Society"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3463676.3485603","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3463676.3485603","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T21:25:08Z","timestamp":1750195508000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3463676.3485603"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,11,15]]},"references-count":83,"alternative-id":["10.1145\/3463676.3485603","10.1145\/3463676"],"URL":"https:\/\/doi.org\/10.1145\/3463676.3485603","relation":{},"subject":[],"published":{"date-parts":[[2021,11,15]]},"assertion":[{"value":"2021-11-15","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}