{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:54:42Z","timestamp":1783439682842,"version":"3.54.6"},"publisher-location":"New York, NY, USA","reference-count":56,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,5,13]],"date-time":"2024-05-13T00:00:00Z","timestamp":1715558400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100006374","name":"NSF (National Science Foundation)","doi-asserted-by":"publisher","award":["CNS 2237328"],"award-info":[{"award-number":["CNS 2237328"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006374","name":"National Science Foundation","doi-asserted-by":"publisher","award":["DGE 2043104"],"award-info":[{"award-number":["DGE 2043104"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,5,13]]},"DOI":"10.1145\/3589334.3645618","type":"proceedings-article","created":{"date-parts":[[2024,5,8]],"date-time":"2024-05-08T07:08:13Z","timestamp":1715152093000},"page":"1227-1236","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["A Study of GDPR Compliance under the Transparency and Consent Framework"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7649-353X","authenticated-orcid":false,"given":"Michael","family":"Smith","sequence":"first","affiliation":[{"name":"New Jersey Institute of Technology, Newark, New Jersey, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4186-3032","authenticated-orcid":false,"given":"Antonio","family":"Torres-Ag\u00fcero","sequence":"additional","affiliation":[{"name":"DeepSee.io, Los Angeles, California, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-1114-6375","authenticated-orcid":false,"given":"Riley","family":"Grossman","sequence":"additional","affiliation":[{"name":"New Jersey Institute of Technology, Newark, New Jersey, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2482-0057","authenticated-orcid":false,"given":"Pritam","family":"Sen","sequence":"additional","affiliation":[{"name":"New Jersey Institute of Technology, Newark, New Jersey, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3669-1643","authenticated-orcid":false,"given":"Yi","family":"Chen","sequence":"additional","affiliation":[{"name":"New Jersey Institute of Technology, Newark, New Jersey, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0020-0910","authenticated-orcid":false,"given":"Cristian","family":"Borcea","sequence":"additional","affiliation":[{"name":"New Jersey Institute of Technology, Newark, New Jersey, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,5,13]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"d.]. Opinion of Advocate General Szpunar delivered on","author":"European Court","year":"2019","unstructured":"European Court of Justice [n. d.]. Opinion of Advocate General Szpunar delivered on 21 March 2019. Bundesverband der Verbraucherzentralen und Verbraucherverb\u00e4nde - Verbraucherzentrale Bundesverband e.V. v Planet49 GmbH. Request for a preliminary ruling from the Bundesgerichtshof. Reference for a preliminary ruling - Directive 95\/46\/EC - Directive 2002\/58\/EC - Regulation (EU) 2016\/679 - Processing of personal data and protection of privacy in the electronic communications sector - Cookies - Concept of consent of the data subject - Declaration of consent by means of a pre-ticked checkbox. Case C-673\/17. European Court of Justice. Retrieved May 29th, 2023 from https:\/\/eur-lex.europa.eu\/legal-content\/en\/TXT\/?uri=CELEX: 62017CC0673"},{"key":"e_1_3_2_2_2_1","volume-title":"Retrieved May 28th, 2023","author":"Data Protection Working Party Article","year":"2014","unstructured":"Article 29 Data Protection Working Party 2014. Opinion 06\/2014 on the notion of legitimate interests of the data controller under Article 7 of Directive 95\/46\/EC. Article 29 Data Protection Working Party. Retrieved May 28th, 2023 from https:\/\/ec.europa.eu\/justice\/article-29\/documentation\/opinionrecommendation\/ files\/2014\/wp217_en.pdf"},{"key":"e_1_3_2_2_3_1","volume-title":"Official Journal of the European Union. Retrieved May 23rd","author":"Official Journal of the European Union 2016. Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation) (Text with EEA relevance).","year":"2023","unstructured":"Official Journal of the European Union 2016. Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation) (Text with EEA relevance). Official Journal of the European Union. Retrieved May 23rd, 2023 from http:\/\/data.europa.eu\/eli\/reg\/2016\/679\/oj"},{"key":"e_1_3_2_2_4_1","volume-title":"European Data Protection Supervisor. Retrieved May 24th","author":"Protection Supervisor European Data","year":"2018","unstructured":"European Data Protection Supervisor 2018. The History of the General Data Protection Regulation. European Data Protection Supervisor. Retrieved May 24th, 2023 from https:\/\/edps.europa.eu\/data-protection\/data-protection\/legislation\/ history-general-data-protection-regulation_en"},{"key":"e_1_3_2_2_5_1","volume-title":"IAB Europe. Retrieved May 31st, 2023","author":"Europe IAB","year":"2019","unstructured":"IAB Europe 2019. The Transparency and Consent Framework TCF v2.0 Release for Public Comment A full overview for Publishers. IAB Europe. Retrieved May 31st, 2023 from https:\/\/old.iabeurope.eu\/wp-content\/uploads\/2019\/05\/IAB-EUROPETCF- v2.0-PUBLISHER-WEBINAR-MAY-2019.pdf"},{"key":"e_1_3_2_2_6_1","volume-title":"IAB Europe. Retrieved May 23rd","author":"Europe IAB","year":"2022","unstructured":"IAB Europe 2022. Belgian Market Court Refers IAB Europe Ruling on TCF to The European Court of Justice: IAB Europe Statement. IAB Europe. Retrieved May 23rd, 2023 from https:\/\/iabeurope.eu\/all-news\/belgian-market-courtrefers- iab-europe-ruling-on-tcf-to-the-european-court-of-justice-iab-europestatement\/"},{"key":"e_1_3_2_2_7_1","volume-title":"CNIL. Retrieved May 28th","author":"CNIL","year":"2022","unstructured":"CNIL 2022. Cookies: GOOGLE fined 150 million euros. CNIL. Retrieved May 28th, 2023 from https:\/\/www.cnil.fr\/en\/cookies-google-fined-150-million-euros"},{"key":"e_1_3_2_2_8_1","volume-title":"Retrieved May 23rd, 2023","author":"Protection Belgian Data","year":"2022","unstructured":"Belgian Data Protection Authority (Litigation Chamber) 2022. Decision on the merits 21\/2022 of 2 February 2022: Complaint relating to Transparency & Consent Frame-work. Belgian Data Protection Authority (Litigation Chamber). Retrieved May 23rd, 2023 from https:\/\/www.autoriteprotectiondonnees.be\/publications\/ decision-quant-au-fond-n-21--2022-english.pdf"},{"key":"e_1_3_2_2_9_1","volume-title":"Belgian Data Protection Authority. Retrieved May 23rd","author":"Protection Authority Belgian Data","year":"2023","unstructured":"Belgian Data Protection Authority 2023. The BE DPA to restore order to the online advertising industry: IAB Europe held responsible for a mechanism that infringes the GDPR. Belgian Data Protection Authority. Retrieved May 23rd, 2023 from https:\/\/www.dataprotectionauthority.be\/iab-europe-held-responsiblefor- a-mechanism-that-infringes-the-gdpr"},{"key":"e_1_3_2_2_10_1","volume-title":"IAB Tech Lab. Retrieved May 23rd","author":"Tech Lab IAB","year":"2023","unstructured":"IAB Tech Lab 2023. Consent Management Platform API. IAB Tech Lab. Retrieved May 23rd, 2023 from https:\/\/github.com\/InteractiveAdvertisingBureau\/GDPRTransparency- and-Consent-Framework\/blob\/master\/TCFv2\/IAB%20Tech% 20Lab%20-%20CMP%20API%20v2.md#introduction"},{"key":"e_1_3_2_2_11_1","volume-title":"IAB Tech Lab. Retrieved May 23rd","author":"Tech Lab IAB","year":"2023","unstructured":"IAB Tech Lab 2023. Global-Privacy-Platform. IAB Tech Lab. Retrieved May 23rd, 2023 from https:\/\/github.com\/InteractiveAdvertisingBureau\/Global- Privacy-Platform"},{"key":"e_1_3_2_2_12_1","volume-title":"IAB Europe. Retrieved May 29th","author":"Europe IAB","year":"2023","unstructured":"IAB Europe 2023. IAB Europe & IAB Tech Lab release updated Transparency & Consent Framework. IAB Europe. Retrieved May 29th, 2023 from https:\/\/iabeurope.eu\/press-releases\/iab-europe-iab-tech-lab-releaseupdated- transparency-consent-framework\/"},{"key":"e_1_3_2_2_13_1","volume-title":"IAB Europe. Retrieved May 23rd","author":"Europe IAB","year":"2023","unstructured":"IAB Europe 2023. IAB Europe Seeks Court Decision on Validation Of The Action Plan as it Moves Forward With TCF Evolutions. IAB Europe. Retrieved May 23rd, 2023 from https:\/\/iabeurope.eu\/all-news\/iab-europe-seeks-court-decision-onvalidation- of-the-action-plan-as-it-moves-forward-with-tcf-evolutions\/"},{"key":"e_1_3_2_2_14_1","volume-title":"IAB Europe. Retrieved May 23rd","author":"Europe IAB","year":"2023","unstructured":"IAB Europe 2023. TCF - Transparency & Consent Framework. IAB Europe. Retrieved May 23rd, 2023 from https:\/\/iabeurope.eu\/transparency-consentframework\/"},{"key":"e_1_3_2_2_15_1","volume-title":"IAB Europe. Retrieved October 11th","author":"Europe IAB","year":"2023","unstructured":"IAB Europe 2023. TCF 2.2 Launches! All You Need To Know. IAB Europe. Retrieved October 11th, 2023 from https:\/\/iabeurope.eu\/all-news\/tcf-2--2-launches-all-youneed- to-know\/"},{"key":"e_1_3_2_2_16_1","volume-title":"IAB Tech Lab. Retrieved May 23rd","author":"Tech Lab IAB","year":"2023","unstructured":"IAB Tech Lab 2023. Transparency and Consent String with Global Vendor & CMP List Formats. IAB Tech Lab. Retrieved May 23rd, 2023 from https:\/\/github.com\/InteractiveAdvertisingBureau\/GDPR-Transparencyand- Consent-Framework\/blob\/master\/TCFv2\/IAB%20Tech%20Lab%20- %20Consent%20string%20and%20vendor%20list%20formats%20v2.md#howshould- a-transparency--consent-string-be-stored"},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3351095.3372871"},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3450048"},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3543507.3583311"},{"key":"e_1_3_2_2_20_1","volume-title":"Proceedings of the 31st USENIX Security Symposium","author":"Bollinger Dino","year":"2022","unstructured":"Dino Bollinger, Karel Kubicek, Carlos Cotrini, and David Basin. 2022. Automating Cookie Consent and GDPR Violation Detection. Proceedings of the 31st USENIX Security Symposium (2022)."},{"key":"e_1_3_2_2_21_1","unstructured":"BrowserStack. 2023. What is Headless Browser and Headless Browser Testing? https:\/\/www.browserstack.com\/guide\/what-is-headless-browser-testing."},{"key":"e_1_3_2_2_22_1","volume-title":"The Impacts of AdTech on Privacy Rights and the Rule of Law. Technology and Regulation","author":"Costello R\u00f3is\u00edn \u00c1ine","year":"2020","unstructured":"R\u00f3is\u00edn \u00c1ine Costello. 2020. The Impacts of AdTech on Privacy Rights and the Rule of Law. Technology and Regulation (2020)."},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23378"},{"key":"e_1_3_2_2_24_1","unstructured":"C. Denison B. Ghazi Kumar R. Kamath P. P. Manurangsi K. G. Narra and C. Zhang. 2023. Private Ad Modeling with DP-SGD. arXiv preprint (October 2023). https:\/\/doi.org\/arXiv:2211.11896"},{"key":"e_1_3_2_2_25_1","unstructured":"Didomi. 2023. Didomi IAB TCF. https:\/\/support.didomi.io\/iab-tcf-v2-newpurposes\/ features-summary."},{"key":"e_1_3_2_2_26_1","unstructured":"IAB Europe. 2022. IAB Europe Transparency & Consent Framework -- Policies Version 2022-06--21.3.5. https:\/\/iabeurope.eu\/wpcontent\/ uploads\/2022\/06\/TransparencyConsentFramework_Policies_version_TCFv2.0- 2022-06--20.3.5_FINAL-1.pdf."},{"key":"e_1_3_2_2_27_1","volume-title":"Belgian Market Court Agrees That CJEU Decision is Needed Before Further Assessment of Action Plan Validation. (September","author":"Europe IAB","year":"2023","unstructured":"IAB Europe. 2023. Belgian Market Court Agrees That CJEU Decision is Needed Before Further Assessment of Action Plan Validation. (September 2023)."},{"key":"e_1_3_2_2_28_1","unstructured":"IAB Europe. 2023. IAB Europe. https:\/\/iabeurope.eu\/iab-europe-transparencyconsent- framework-policies\/."},{"key":"e_1_3_2_2_29_1","volume-title":"Static Analysis for GDPR Compliance. ITASEC","author":"Ferrara Pietro","year":"2018","unstructured":"Pietro Ferrara and Fausto Spoto. 2018. Static Analysis for GDPR Compliance. ITASEC (2018)."},{"key":"e_1_3_2_2_30_1","volume-title":"GDPR Compliance in SMEs: There is much to be done. Journal of Information Systems Engineering & Management 3","author":"Concei\u00e7\u00e3o Freitas Maria Da","year":"2018","unstructured":"Maria Da Concei\u00e7\u00e3o Freitas and Miguel Mira Da Silva. 2018. GDPR Compliance in SMEs: There is much to be done. Journal of Information Systems Engineering & Management 3 (2018). Issue 4."},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376511"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423647"},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2021-0069"},{"key":"e_1_3_2_2_34_1","unstructured":"IAB. 2023. IABTCF\/Core. https:\/\/www.npmjs.com\/package\/@iabtcf\/core."},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3512231"},{"key":"e_1_3_2_2_36_1","volume-title":"Shahandashti","author":"Kampanos Georgios","year":"2021","unstructured":"Georgios Kampanos and Siamak F. Shahandashti. 2021. Accept All: The Landscape of Cookie Banners in Greece and the UK. ICT Systems Security and Privacy Protection (2021)."},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3544548.3580637"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23386"},{"key":"e_1_3_2_2_39_1","unstructured":"Su-Chin Lin Kai-Hsiang Chou Yen Chen Hsu-Chun Hsiao Darion Cassel Lujo Bauer and Limin Jia. 2022. (2022)."},{"key":"e_1_3_2_2_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3450022"},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00076"},{"key":"e_1_3_2_2_42_1","unstructured":"Microsoft. 2020. Playwright. https:\/\/github.com\/microsoft\/playwright."},{"key":"e_1_3_2_2_43_1","volume-title":"COOKIEGRAPH: Understanding and Detecting First- Party Tracking Cookies. 2023 ACM Conference on Computer and Communications Security","author":"Munir Shaoor","year":"2023","unstructured":"Shaoor Munir, Sandra Siby, Umar Iqbal, Steven Englehardt, Zubair Shafiq, and Carmela Troncoo. 2023. COOKIEGRAPH: Understanding and Detecting First- Party Tracking Cookies. 2023 ACM Conference on Computer and Communications Security (2023)."},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376321"},{"key":"e_1_3_2_2_45_1","unstructured":"OneTrust. 2023. Cookiepedia. https:\/\/cookiepedia.co.uk.."},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3450056"},{"key":"e_1_3_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.4064729"},{"key":"e_1_3_2_2_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329806"},{"key":"e_1_3_2_2_49_1","doi-asserted-by":"publisher","DOI":"10.71265\/g317tv72"},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-76663-4_3"},{"key":"e_1_3_2_2_51_1","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2022-0082"},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2023-0002"},{"key":"e_1_3_2_2_53_1","volume-title":"Impossible Asks: Can the Transparency and Consent Framework Ever Authorise Real-Time Bidding after the Belgian DPA Decision? Technology and Regulation","author":"Veale Michael","year":"2022","unstructured":"Michael Veale, Midas Nouwens, and Cristiana Santos. 2022. Impossible Asks: Can the Transparency and Consent Framework Ever Authorise Real-Time Bidding after the Belgian DPA Decision? Technology and Regulation (2022)."},{"key":"e_1_3_2_2_54_1","doi-asserted-by":"publisher","DOI":"10.1017\/glj.2022.18"},{"key":"e_1_3_2_2_55_1","doi-asserted-by":"publisher","DOI":"10.5220\/0010521300002998"},{"key":"e_1_3_2_2_56_1","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2023-0052"}],"event":{"name":"WWW '24: The ACM Web Conference 2024","location":"Singapore Singapore","acronym":"WWW '24","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of the ACM Web Conference 2024"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3589334.3645618","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3589334.3645618","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T00:33:16Z","timestamp":1755822796000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3589334.3645618"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,5,13]]},"references-count":56,"alternative-id":["10.1145\/3589334.3645618","10.1145\/3589334"],"URL":"https:\/\/doi.org\/10.1145\/3589334.3645618","relation":{},"subject":[],"published":{"date-parts":[[2024,5,13]]},"assertion":[{"value":"2024-05-13","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}