{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,31]],"date-time":"2026-08-31T17:10:38Z","timestamp":1788196238388,"version":"build-2803163510"},"publisher-location":"New York, NY, USA","reference-count":55,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,4,12]],"date-time":"2024-04-12T00:00:00Z","timestamp":1712880000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,4,12]]},"DOI":"10.1145\/3597503.3639159","type":"proceedings-article","created":{"date-parts":[[2024,4,12]],"date-time":"2024-04-12T16:43:26Z","timestamp":1712940206000},"page":"1-12","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["CSChecker: Revisiting GDPR and CCPA Compliance of Cookie Banners on the Web"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8863-8751","authenticated-orcid":false,"given":"Mingxue","family":"Zhang","sequence":"first","affiliation":[{"name":"The State Key Laboratory of Blockchain and  Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8260-3304","authenticated-orcid":false,"given":"Wei","family":"Meng","sequence":"additional","affiliation":[{"name":"The Chinese University of Hong Kong, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-9867-3915","authenticated-orcid":false,"given":"You","family":"Zhou","sequence":"additional","affiliation":[{"name":"The State Key Laboratory of Blockchain and  Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3441-6277","authenticated-orcid":false,"given":"Kui","family":"Ren","sequence":"additional","affiliation":[{"name":"The State Key Laboratory of Blockchain and  Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,4,12]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2018. General Data Protection Regulation (GDPR). https:\/\/gdpr-info.eu\/."},{"key":"e_1_3_2_1_2_1","unstructured":"2018. IAB Europe Transparency and Consent Framework policies (v2.1). https:\/\/iabeurope.eu\/iab-europe-transparency-consent-framework-policies\/."},{"key":"e_1_3_2_1_3_1","unstructured":"2018. Transparency and Consent Framework (TCF). https:\/\/github.com\/InteractiveAdvertisingBureau\/GDPR-Transparency-and-Consent-Framework."},{"key":"e_1_3_2_1_4_1","unstructured":"2019. Consent string and vendor list format v2. https:\/\/github.com\/InteractiveAdvertisingBureau\/GDPR-Transparency-and-Consent-Framework\/blob\/master\/TCFv2\/IAB%20Tech%20Lab%20-%20Consent%20string%20and%20vendor%20list%20formats%20v2.md."},{"key":"e_1_3_2_1_5_1","unstructured":"2019. U.S. Privacy String. https:\/\/github.com\/InteractiveAdvertisingBureau\/USPrivacy\/blob\/master\/CCPA\/US%20Privacy%20String.md."},{"key":"e_1_3_2_1_6_1","unstructured":"2020. California Consumer Privacy Act (CCPA). https:\/\/en.wikipedia.org\/wiki\/California_Consumer_Privacy_Act."},{"key":"e_1_3_2_1_7_1","unstructured":"2020. California Consumer Privacy Act of 2018 [1798.135]. https:\/\/leginfo.legislature.ca.gov\/faces\/codes_displaySection.xhtml?sectionNum=1798.135.&nodeTreePath=8.4.45&lawCode=CIV."},{"key":"e_1_3_2_1_8_1","unstructured":"2020. GDPR Article 14: Information to be provided where personal data have not been obtained from the data subject. https:\/\/gdpr-info.eu\/art-14-gdpr\/."},{"key":"e_1_3_2_1_9_1","unstructured":"2023. CLD3. https:\/\/github.com\/google\/cld3."},{"key":"e_1_3_2_1_10_1","unstructured":"2023. Consent-O-Matic. https:\/\/consentomatic.au.dk\/."},{"key":"e_1_3_2_1_11_1","unstructured":"2023. Cookie Glasses. https:\/\/chrome.google.com\/webstore\/detail\/cookie-glasses\/gncnjghkclkhpkfhghcbobednpchjifk."},{"key":"e_1_3_2_1_12_1","unstructured":"2023. IAB Tech Lab. https:\/\/iabtechlab.com\/."},{"key":"e_1_3_2_1_13_1","unstructured":"2023. privacychoice. http:\/\/www.privacychoice.org.."},{"key":"e_1_3_2_1_14_1","volume-title":"Terms of Service","unstructured":"2023. Terms of Service; Didn't Read (ToS;DR). https:\/\/tosdr.org.."},{"key":"e_1_3_2_1_15_1","unstructured":"2023. TOSBack. http:\/\/tosback.org.."},{"key":"e_1_3_2_1_16_1","unstructured":"2023. TOSBack2. https:\/\/github.com\/pde\/tosback2.."},{"key":"e_1_3_2_1_17_1","unstructured":"2023. US Privacy String. https:\/\/github.com\/InteractiveAdvertisingBureau\/USPrivacy\/blob\/master\/CCPA\/US%20Privacy%20String.md."},{"key":"e_1_3_2_1_18_1","unstructured":"2023. WhoisXMLAPI. https:\/\/website-categorization.whoisxmlapi.com\/api."},{"key":"e_1_3_2_1_19_1","volume-title":"Data privacy against innovation or against discrimination?: The case of the California Consumer Privacy Act (CCPA). Telematics and Informatics 52","author":"Baik Jeeyun Sophia","year":"2020","unstructured":"Jeeyun Sophia Baik. 2020. Data privacy against innovation or against discrimination?: The case of the California Consumer Privacy Act (CCPA). Telematics and Informatics 52 (2020)."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3289600.3291026"},{"key":"e_1_3_2_1_21_1","volume-title":"Proceedings of the 31st USENIX Security Symposium (Security)","author":"Bollinger Dino","year":"2022","unstructured":"Dino Bollinger, Karel Kubicek, Carlos Cotrini, and David Basin. 2022. Automating Cookie Consent and {GDPR} Violation Detection. In Proceedings of the 31st USENIX Security Symposium (Security). Boston, MA, USA."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2994620.2994622"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2015-0007"},{"key":"e_1_3_2_1_24_1","volume-title":"Proceedings of the 2022 Annual Network and Distributed System Security Symposium (NDSS)","author":"Degeling Martin","year":"2022","unstructured":"Martin Degeling, Christine Utz, Christopher Lentzsch, Henry Hosseini, Florian Schaub, and Thorsten Holz. 2022. We value your privacy... now take some cookies: Measuring the GDPR's impact on web privacy. In Proceedings of the 2022 Annual Network and Distributed System Security Symposium (NDSS). San Diego, CA, USA."},{"key":"e_1_3_2_1_25_1","volume-title":"Workshop on Technology and Consumer Protection (ConPro'19)","author":"van Eijk Rob","year":"2019","unstructured":"Rob van Eijk, Hadi Asghari, Philipp Winter, and Arvind Narayanan. 2019. The impact of user location on cookie notices (inside and outside of the European union). In Workshop on Technology and Consumer Protection (ConPro'19)."},{"key":"e_1_3_2_1_26_1","volume-title":"Proceedings of the Web Conference (WWW)","author":"Emmanouil Papadogiannakis","year":"2021","unstructured":"Papadogiannakis Emmanouil, Papadopoulos Panagiotis, Kourtellis Nicolas, and Markatos Evangelos. 2021. User Tracking in the Post-cookie Era: How Websites Bypass GDPR Consent to Track Users. In Proceedings of the Web Conference (WWW). Ljubljana, Slovenia."},{"key":"e_1_3_2_1_27_1","volume-title":"Twelfth Symposium on Usable Privacy and Security ({SOUPS}","author":"Gluck Joshua","year":"2016","unstructured":"Joshua Gluck, Florian Schaub, Amy Friedman, Hana Habib, Norman Sadeh, Lorrie Faith Cranor, and Yuvraj Agarwal. 2016. How short is too short? Implications of length and framing on the effectiveness of privacy notices. In Twelfth Symposium on Usable Privacy and Security ({SOUPS} 2016). 321--340."},{"key":"e_1_3_2_1_28_1","volume-title":"Polisis: Automated analysis and presentation of privacy policies using deep learning. In 27th {USENIX} Security Symposium ({USENIX} Security 18). 531--548.","author":"Harkous Hamza","year":"2018","unstructured":"Hamza Harkous, Kassem Fawaz, R\u00e9mi Lebret, Florian Schaub, Kang G Shin, and Karl Aberer. 2018. Polisis: Automated analysis and presentation of privacy policies using deep learning. In 27th {USENIX} Security Symposium ({USENIX} Security 18). 531--548."},{"key":"e_1_3_2_1_29_1","volume-title":"Proceedings of the 7th Symposium on Usable Privacy and Security (SOUPS 2021). Proceedings of the 7th Symposium on Usable Privacy and Security (SOUPS","author":"Kollnig Konrad","year":"2021","unstructured":"Konrad Kollnig and Ge Wang. 2021. A Fait Accompli? An Empirical Study into the Absence of Consent to Third- Party Tracking in Android Apps. In Proceedings of the 7th Symposium on Usable Privacy and Security (SOUPS 2021). Proceedings of the 7th Symposium on Usable Privacy and Security (SOUPS 2021)."},{"key":"e_1_3_2_1_30_1","volume-title":"10th Symposium On Usable Privacy and Security ({SOUPS}","author":"Korff Stefan","year":"2014","unstructured":"Stefan Korff and Rainer B\u00f6hme. 2014. Too much choice: End-user privacy decisions in the context of choice proliferation. In 10th Symposium On Usable Privacy and Security ({SOUPS} 2014). 69--87."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2015.01.004"},{"key":"e_1_3_2_1_32_1","unstructured":"Timothy Libert Lucas Graves and Rasmus Kleis Nielsen. 2018. Changes in third-party content on European News Websites after GDPR. (2018)."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.23134"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2020-0037"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00076"},{"key":"e_1_3_2_1_36_1","volume-title":"Proceedings of the 30th USENIX Security Symposium (Security). Virtual Event.","author":"Nguyen Trung Tin","year":"2021","unstructured":"Trung Tin Nguyen, Michael Backes, Ninja Marnau, and Ben Stock. 2021. Share First, Ask Later (or Never?)-Studying Violations of GDPR's Explicit Consent in Android Apps. In Proceedings of the 30th USENIX Security Symposium (Security). Virtual Event."},{"key":"e_1_3_2_1_37_1","volume-title":"Proceedings of the 29th ACM Conference on Computer and Communications Security (CCS)","author":"Nguyen Trung Tin","year":"2022","unstructured":"Trung Tin Nguyen, Michael Backes, and Ben Stock. 2022. Freely Given Consent? Studying Consent Notice of Third-Party Tracking and Its Violations of GDPR in Android Apps. In Proceedings of the 29th ACM Conference on Computer and Communications Security (CCS). Los Angeles, CA, USA."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376321"},{"key":"e_1_3_2_1_39_1","volume-title":"The right to opt-out of sale under CCPA. arXiv preprint arXiv:2009.07884","author":"O'Connor Sean","year":"2020","unstructured":"Sean O'Connor, Ryan Nurwono, and Eleanor Birrell. 2020. (Un) clear and (In) conspicuous: The right to opt-out of sale under CCPA. arXiv preprint arXiv:2009.07884 (2020)."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3490754"},{"key":"e_1_3_2_1_41_1","volume-title":"Proceedings of the Web Conference (WWW)","author":"Ryan Amos","year":"2021","unstructured":"Amos Ryan, Acar Gunes, Lucherini Elena, Kshirsagar Mihir, Narayanan Arvind, and Mayer Jonathan. 2021. Privacy Policies over Time: Curation and Analysis of a Million-Document Dataset. In Proceedings of the Web Conference (WWW). Ljubljana, Slovenia."},{"key":"e_1_3_2_1_42_1","volume-title":"Understanding Opt-Out States for Online Behavioral Advertising. In 2019 IEEE Security and Privacy Workshops (SPW). IEEE, 92--99","author":"Sakamoto Takahito","year":"2019","unstructured":"Takahito Sakamoto and Masahiro Matsunaga. 2019. After GDPR, Still Tracking or Not? Understanding Opt-Out States for Online Behavioral Advertising. In 2019 IEEE Security and Privacy Workshops (SPW). IEEE, 92--99."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329806"},{"key":"e_1_3_2_1_44_1","volume-title":"Proceedings of the Web Conference (WWW)","author":"Shuang Liu","year":"2021","unstructured":"Liu Shuang, Zhao Baiyang, Guo Renjie, Meng Guozhu, Zhang Fan, and Zhang Meishan. 2021. Have You been Properly Notified? Automatic Compliance Analysis of Privacy Policy Text with GDPR Article 13. In Proceedings of the Web Conference (WWW). Ljubljana, Slovenia."},{"key":"e_1_3_2_1_45_1","volume-title":"The Impact of Visibility on the Right to Opt-out of Sale under CCPA. arXiv preprint arXiv:2206.10545","author":"Siebel Aden","year":"2022","unstructured":"Aden Siebel and Eleanor Birrell. 2022. The Impact of Visibility on the Right to Opt-out of Sale under CCPA. arXiv preprint arXiv:2206.10545 (2022)."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313524"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3180445.3180447"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0023"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/3320269.3372194"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354212"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355583"},{"key":"e_1_3_2_1_52_1","volume-title":"Proceedings of the USENIX Symposium on Usable Privacy and Security (SOUPS)","author":"Veys Sophie","year":"2021","unstructured":"Sophie Veys, Daniel Serrano, Madison Stamos, Margot Herman, Nathan Reitinger, Michelle L Mazurek, and Blase Ur. 2021. Pursuing Usable and Useful Data Downloads Under GDPR\/CCPA Access Rights via Co-Design. In Proceedings of the USENIX Symposium on Usable Privacy and Security (SOUPS) 2021."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363200"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3127519"},{"key":"e_1_3_2_1_55_1","volume-title":"Proceedings of the 23rd USENIX Security Symposium (Security)","author":"Zimmeck Sebastian","year":"2014","unstructured":"Sebastian Zimmeck and Steven M Bellovin. 2014. Privee: An architecture for automatically analyzing web privacy policies. In Proceedings of the 23rd USENIX Security Symposium (Security). San Diego, CA, USA."}],"event":{"name":"ICSE '24: IEEE\/ACM 46th International Conference on Software Engineering","location":"Lisbon Portugal","acronym":"ICSE '24","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS","Faculty of Engineering of University of Porto"]},"container-title":["Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3597503.3639159","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3597503.3639159","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T22:49:12Z","timestamp":1750286952000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3597503.3639159"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,12]]},"references-count":55,"alternative-id":["10.1145\/3597503.3639159","10.1145\/3597503"],"URL":"https:\/\/doi.org\/10.1145\/3597503.3639159","relation":{},"subject":[],"published":{"date-parts":[[2024,4,12]]},"assertion":[{"value":"2024-04-12","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}