{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T22:46:51Z","timestamp":1781736411433,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":55,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,4,25]],"date-time":"2025-04-25T00:00:00Z","timestamp":1745539200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CPS-1953740"],"award-info":[{"award-number":["CPS-1953740"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,4,26]]},"DOI":"10.1145\/3706598.3714138","type":"proceedings-article","created":{"date-parts":[[2025,4,24]],"date-time":"2025-04-24T04:45:58Z","timestamp":1745469958000},"page":"1-25","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["Dark Patterns in the Opt-Out Process and Compliance with the California Consumer Privacy Act (CCPA)"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0835-8598","authenticated-orcid":false,"given":"Van Hong","family":"Tran","sequence":"first","affiliation":[{"name":"Computer Science, University of Chicago, Chicago, Illinois, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-8229-971X","authenticated-orcid":false,"given":"Aarushi","family":"Mehrotra","sequence":"additional","affiliation":[{"name":"Network and Internet Security Lab, University of Chicago, Chicago, Illinois, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-5793-0811","authenticated-orcid":false,"given":"Ranya","family":"Sharma","sequence":"additional","affiliation":[{"name":"University of Chicago, Chicago, Illinois, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0804-6110","authenticated-orcid":false,"given":"Marshini","family":"Chetty","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Chicago, Chicago, Illinois, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9315-5201","authenticated-orcid":false,"given":"Nick","family":"Feamster","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Chicago, Chicago, Illinois, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0541-8521","authenticated-orcid":false,"given":"Jens","family":"Frankenreiter","sequence":"additional","affiliation":[{"name":"School of Law, Washington University in St. Louis, Saint Louis, Missouri, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-8132-0056","authenticated-orcid":false,"given":"Lior","family":"Strahilevitz","sequence":"additional","affiliation":[{"name":"Law School, University of Chicago, Chicago, Illinois, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,4,25]]},"reference":[{"key":"e_1_3_3_3_2_2","doi-asserted-by":"publisher","DOI":"10.1145\/3544548.3580725"},{"key":"e_1_3_3_3_3_2","doi-asserted-by":"publisher","unstructured":"Christoph B\u00f6sch Benjamin Erb Frank Kargl Henning Kopp and Stefan Pfattheicher. 2016. Tales from the Dark Side: Privacy Dark Strategies and Privacy Dark Patterns. Proceedings on Privacy Enhancing Technologies 2016 (07 2016) 237\u2013254. 10.1515\/popets-2016-0038","DOI":"10.1515\/popets-2016-0038"},{"key":"e_1_3_3_3_4_2","unstructured":"Office of the Attorney\u00a0General California Department\u00a0of Justice. 2023. California Consumer Privacy Act (CCPA). https:\/\/oag.ca.gov\/privacy\/ccpa. Accessed: 2024-11-08."},{"key":"e_1_3_3_3_5_2","unstructured":"Jan Charatan and Eleanor Birrell. 2023. Two Steps Forward and One Step Back: The Right to Opt-Out of Sale Under CPRA. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2312.15094 (2023)."},{"key":"e_1_3_3_3_6_2","doi-asserted-by":"publisher","DOI":"10.1145\/3586183.3606783"},{"key":"e_1_3_3_3_7_2","doi-asserted-by":"publisher","DOI":"10.1145\/3463676.3485601"},{"key":"e_1_3_3_3_8_2","unstructured":"Global\u00a0Privacy Control. 2024. Global Privacy Control - Take Control Of Your Privacy. https:\/\/globalprivacycontrol.org\/. Accessed: 2024-11-08."},{"key":"e_1_3_3_3_9_2","unstructured":"California Privacy Protection\u00a0Agency (CPPA). 2024. California Consumer Privacy Act Regulations. https:\/\/cppa.ca.gov\/regulations\/pdf\/cppa_regs.pdf. Accessed: 2024-11-08."},{"key":"e_1_3_3_3_10_2","doi-asserted-by":"crossref","unstructured":"Lorrie\u00a0Faith Cranor. 2021. Informing California Privacy Regulations With Evidence From Research. Commun. ACM 64 3 (2021) 29\u201332.","DOI":"10.1145\/3447253"},{"key":"e_1_3_3_3_11_2","unstructured":"DataForSEO. 2024. Powerful API Stack For Data-Driven Marketers. http:\/\/www.dataforseo.com\/. Accessed: 2024-11-08."},{"key":"e_1_3_3_3_12_2","unstructured":"Commission\u00a0Nationale de\u00a0l\u2019Informatique et\u00a0des Libert\u00e9s\u00a0(CNIL). 2023. Deliberation of the restricted formation n\u00b0 SAN-2023-003 of March 16 2023 concerning the company CITYSCOOT. https:\/\/www.legifrance.gouv.fr\/cnil\/id\/CNILTEXT000047346903?isSuggest=true. Accessed: 2024-11-08."},{"key":"e_1_3_3_3_13_2","doi-asserted-by":"crossref","unstructured":"Martin Degeling Christine Utz Christopher Lentzsch Henry Hosseini Florian Schaub and Thorsten Holz. 2018. We Value Your Privacy... Now Take Some Cookies: Measuring the GDPR\u2019s Impact on Web Privacy. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1808.05096 (2018).","DOI":"10.14722\/ndss.2019.23378"},{"key":"e_1_3_3_3_14_2","unstructured":"NOYB European\u00a0Center for Digital\u00a0Rights. 2022. Where did all the \u201creject\u201d buttons come from?!https:\/\/noyb.eu\/en\/where-did-all-reject-buttons-come"},{"key":"e_1_3_3_3_15_2","unstructured":"Office for Human Research Protections\u00a0(OHRP). 2022. The Belmont Report-Ethical Principles and Guidelines for the Protection of Human Subjects of Research. https:\/\/www.hhs.gov\/ohrp\/regulations-and-policy\/belmont-report\/read-the-belmont-report\/index.html#xbenefit"},{"key":"e_1_3_3_3_16_2","doi-asserted-by":"publisher","unstructured":"Colin Gray Shruthi Chivukula Jingle Chen Shruthi Chivukula and Sai\u00a0Shruthi Chivukula. 2021. End User Accounts of Dark Patterns as Felt Manipulation. Proceedings of the ACM on Human-Computer Interaction 5 (10 2021) Article 372. 10.1145\/3479516","DOI":"10.1145\/3479516"},{"key":"e_1_3_3_3_17_2","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3174108"},{"key":"e_1_3_3_3_18_2","doi-asserted-by":"publisher","DOI":"10.1145\/3613904.3642436"},{"key":"e_1_3_3_3_19_2","doi-asserted-by":"crossref","unstructured":"Johanna Gunawan Amogh Pradeep David Choffnes Woodrow Hartzog and Christo Wilson. 2021. A Comparative Study of Dark Patterns Across Web and Mobile Modalities. Proceedings of the ACM on Human-Computer Interaction 5 CSCW2 (2021) 1\u201329.","DOI":"10.1145\/3479521"},{"key":"e_1_3_3_3_20_2","first-page":"273","volume-title":"Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022)","author":"Habib Hana","year":"2022","unstructured":"Hana Habib and Lorrie\u00a0Faith Cranor. 2022. Evaluating the usability of privacy choice mechanisms. In Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022). 273\u2013289."},{"key":"e_1_3_3_3_21_2","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376511"},{"key":"e_1_3_3_3_22_2","first-page":"387","volume-title":"Fifteenth Symposium on Usable Privacy and Security (SOUPS 2019)","author":"Habib Hana","year":"2019","unstructured":"Hana Habib, Yixin Zou, Aditi Jannu, Neha Sridhar, Chelse Swoopes, Alessandro Acquisti, Lorrie\u00a0Faith Cranor, Norman Sadeh, and Florian Schaub. 2019. An Empirical Analysis of Data Deletion and { Opt-Out} Choices on 150 Websites. In Fifteenth Symposium on Usable Privacy and Security (SOUPS 2019). 387\u2013406."},{"key":"e_1_3_3_3_23_2","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445387"},{"key":"e_1_3_3_3_24_2","doi-asserted-by":"crossref","unstructured":"Elizabeth\u00a0(Liz) Harding Jarno\u00a0J. Vanto Reece Clark L. Hannah\u00a0Ji and Sara\u00a0C. Ainsworth. 2019. Understanding the Scope and Impact of the California Consumer Privacy Act of 2018. Journal of Data Protection & Privacy 2 3 (March 2019) 234\u2013253.","DOI":"10.69554\/TCFN5165"},{"key":"e_1_3_3_3_25_2","unstructured":"Brignull Harry. 2024. Deceptive Patterns. https:\/\/www.deceptive.design\/. Accessed: 2024-11-08."},{"key":"e_1_3_3_3_26_2","doi-asserted-by":"publisher","unstructured":"Henry Hosseini Christine Utz Martin Degeling and Thomas Hupperich. 2024. A Bilingual Longitudinal Analysis of Privacy Policies Measuring the Impacts of the GDPR and the CCPA\/CPRA. (4 2024). 10.60882\/cispa.25771329.v1","DOI":"10.60882\/cispa.25771329.v1"},{"key":"e_1_3_3_3_27_2","doi-asserted-by":"publisher","DOI":"10.1145\/3544548.3580773"},{"key":"e_1_3_3_3_28_2","unstructured":"California\u00a0Legislative Information. [n. d.]. California Consumer Privacy Act of 2018. https:\/\/leginfo.legislature.ca.gov\/faces\/codes_displayText.xhtml?division=3.&part=4.&lawCode=CIV&title=1.81.5 Accessed: 2024-11-08."},{"key":"e_1_3_3_3_29_2","unstructured":"Jennifer King and Adriana Stephan. 2021. Regulating Privacy Dark Patterns in Practice\u2014Drawing Inspiration from California Privacy Rights Act. https:\/\/georgetownlawtechreview.org\/regulating-privacy-dark-patterns-in-practice-drawing-inspiration-from-california-privacy-rights-act\/GLTR-09-2021\/. Accessed: 2024-11-08."},{"key":"e_1_3_3_3_30_2","doi-asserted-by":"crossref","unstructured":"Matthew\u00a0B. Kugler Lior\u00a0Jacob Strahilevitz Marshini Chetty and Chirag Mahapatra. 2025. Can Consumers Protect Themselves Against Privacy Dark Patterns? University of New Hampshire Law Review 23 (2025). Forthcoming.","DOI":"10.2139\/ssrn.5084827"},{"key":"e_1_3_3_3_31_2","unstructured":"Bloomberg Law. 2024. Which States Have Consumer Data Privacy Laws? https:\/\/pro.bloomberglaw.com\/insights\/privacy\/state-privacy-legislation-tracker\/. Accessed: 2024-11-08."},{"key":"e_1_3_3_3_32_2","doi-asserted-by":"publisher","DOI":"10.1145\/2207676.2207759"},{"key":"e_1_3_3_3_33_2","unstructured":"Lewis\u00a0Rice LLC. 2024. U.S. State Privacy Laws. https:\/\/www.lewisrice.com\/u-s-state-privacy-laws\/. Accessed: 2024-11-08."},{"key":"e_1_3_3_3_34_2","doi-asserted-by":"crossref","unstructured":"Jamie Luguri and Lior\u00a0Jacob Strahilevitz. 2021. Shining a Light on Dark Patterns. Journal of Legal Analysis 13 1 (2021) 43\u2013109.","DOI":"10.1093\/jla\/laaa006"},{"key":"e_1_3_3_3_35_2","doi-asserted-by":"publisher","DOI":"10.1145\/3491101.3519687"},{"key":"e_1_3_3_3_36_2","doi-asserted-by":"publisher","unstructured":"Dominique Machuletz and Rainer B\u00f6hme. 2020. Multiple Purposes Multiple Problems: A User Study of Consent Dialogs after GDPR. Proceedings on Privacy Enhancing Technologies 2020 2 (April 2020) 481\u2013498. 10.2478\/popets-2020-0037","DOI":"10.2478\/popets-2020-0037"},{"key":"e_1_3_3_3_37_2","doi-asserted-by":"crossref","unstructured":"S\u00a0M\u00a0Hasan Mansur Sabiha Salma Damilola Awofisayo and Kevin Moran. 2023. AidUI: Toward Automated Recognition of Dark Patterns in User Interfaces. 2023 IEEE\/ACM 45th International Conference on Software Engineering (ICSE) (2023) 1958\u20131970. https:\/\/api.semanticscholar.org\/CorpusID:257496896","DOI":"10.1109\/ICSE48619.2023.00166"},{"key":"e_1_3_3_3_38_2","doi-asserted-by":"crossref","unstructured":"Arunesh Mathur Gunes Acar Michael\u00a0J Friedman Eli Lucherini Jonathan Mayer Marshini Chetty and Arvind Narayanan. 2019. Dark Patterns at Scale: Findings From a Crawl of 11K Shopping Websites. Proceedings of the ACM on Human-Computer Interaction 3 CSCW (2019) 1\u201332.","DOI":"10.1145\/3359183"},{"key":"e_1_3_3_3_39_2","unstructured":"Mahoney Maureen. 2020. CCPA: Are Consumers\u2019 Digital Rights Protected? https:\/\/advocacy.consumerreports.org\/wp-content\/uploads\/2020\/09\/CR_CCPA-Are-Consumers-Digital-Rights-Protected_092020_vf.pdf. Accessed: 2024-11-08."},{"key":"e_1_3_3_3_40_2","doi-asserted-by":"publisher","DOI":"10.1145\/3544548.3580695"},{"key":"e_1_3_3_3_41_2","unstructured":"Josh Nadeau. 2022. How the CCPA Is Shaping Other State\u2019s Data Privacy. https:\/\/securityintelligence.com\/articles\/how-ccpa-shaping-states-data-privacy\/. Accessed: 2024-11-08."},{"key":"e_1_3_3_3_42_2","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376321"},{"key":"e_1_3_3_3_43_2","doi-asserted-by":"publisher","DOI":"10.1145\/3463676.3485598"},{"key":"e_1_3_3_3_44_2","unstructured":"Pitchbook. 2023. Venture Capital private equity and M&A database | Pitchbook. https:\/\/pitchbook.com\/."},{"key":"e_1_3_3_3_45_2","volume-title":"Workshop on Technology and Consumer Protection (ConPro 2017), in conjunction with the 38th Ieee Symposium on Security and Privacy (IEEE S&P 2017)","author":"Reyes Irwin","year":"2017","unstructured":"Irwin Reyes, Primal Wijesekera, Abbas Razaghpanah, Joel Reardon, Narseo Vallina-Rodriguez, Serge Egelman, Christian Kreibich, et\u00a0al. 2017. \"Is Our Children\u2019s Apps Learning?\" Automatically Detecting COPPA Violations. In Workshop on Technology and Consumer Protection (ConPro 2017), in conjunction with the 38th Ieee Symposium on Security and Privacy (IEEE S&P 2017)."},{"key":"e_1_3_3_3_46_2","volume-title":"The 18th Privacy Enhancing Technologies Symposium (PETS 2018)","author":"Reyes Irwin","year":"2018","unstructured":"Irwin Reyes, Primal Wijesekera, Joel Reardon, Amit Elazari Bar\u00a0On, Abbas Razaghpanah, Narseo Vallina-Rodriguez, Serge Egelman, et\u00a0al. 2018. \u201cWon\u2019t Somebody Think of the Children?\u201d Examining COPPA Compliance at Scale. In The 18th Privacy Enhancing Technologies Symposium (PETS 2018)."},{"key":"e_1_3_3_3_47_2","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329806"},{"key":"e_1_3_3_3_48_2","doi-asserted-by":"publisher","DOI":"10.1145\/3613904.3642881"},{"key":"e_1_3_3_3_49_2","unstructured":"Aden Siebel and Eleanor Birrell. 2022. The Impact of Visibility on the Right to Opt-out of Sale under CCPA. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2206.10545 (2022)."},{"key":"e_1_3_3_3_50_2","doi-asserted-by":"publisher","DOI":"10.1145\/3419249.3420132"},{"key":"e_1_3_3_3_51_2","doi-asserted-by":"publisher","DOI":"10.1145\/3613904.3642597"},{"key":"e_1_3_3_3_52_2","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354212"},{"key":"e_1_3_3_3_53_2","doi-asserted-by":"crossref","unstructured":"Maggie Van\u00a0Nortwick and Christo Wilson. 2022. Setting the Bar Low: Are Websites Complying With the Minimum Requirements of the CCPA? Proceedings on Privacy Enhancing Technologies (2022).","DOI":"10.2478\/popets-2022-0030"},{"key":"e_1_3_3_3_54_2","unstructured":"Mullvad VPN. 2024. Mullvad VPN. https:\/\/mullvad.net\/en. Accessed: 2024-11-08."},{"key":"e_1_3_3_3_55_2","doi-asserted-by":"crossref","unstructured":"Sebastian Zimmeck Oliver Wang Kuba Alicki Jocelyn Wang and Sophie Eng. 2023. Usability and Enforceability of Global Privacy Control. Proceedings on Privacy Enhancing Technologies 2 (2023) 1\u201317.","DOI":"10.56553\/popets-2023-0052"},{"key":"e_1_3_3_3_56_2","unstructured":"Zoominfo. 2023. Zoominfo The Go\u2011To\u2011Market Intelligence Platform. https:\/\/www.zoominfo.com\/."}],"event":{"name":"CHI 2025: CHI Conference on Human Factors in Computing Systems","location":"Yokohama Japan","acronym":"CHI '25","sponsor":["SIGCHI ACM Special Interest Group on Computer-Human Interaction"]},"container-title":["Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3706598.3714138","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3706598.3714138","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3706598.3714138","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,4]],"date-time":"2025-07-04T06:03:37Z","timestamp":1751609017000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3706598.3714138"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4,25]]},"references-count":55,"alternative-id":["10.1145\/3706598.3714138","10.1145\/3706598"],"URL":"https:\/\/doi.org\/10.1145\/3706598.3714138","relation":{},"subject":[],"published":{"date-parts":[[2025,4,25]]},"assertion":[{"value":"2025-04-25","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}