{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,13]],"date-time":"2026-04-13T19:11:12Z","timestamp":1776107472802,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":33,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,4,25]],"date-time":"2025-04-25T00:00:00Z","timestamp":1745539200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,4,26]]},"DOI":"10.1145\/3706599.3720002","type":"proceedings-article","created":{"date-parts":[[2025,4,23]],"date-time":"2025-04-23T20:15:12Z","timestamp":1745439312000},"page":"1-7","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["How Website Owners Use Consent Management Platforms: An Interview Study"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9790-6324","authenticated-orcid":false,"given":"Kalle","family":"Kusk","sequence":"first","affiliation":[{"name":"Digital Design & Information Studies, Aarhus University, Aarhus, Denmark"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6631-799X","authenticated-orcid":false,"given":"Midas","family":"Nouwens","sequence":"additional","affiliation":[{"name":"Digital Design and Information Studies, Aarhus University, Aarhus, Denmark"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,4,25]]},"reference":[{"key":"e_1_3_3_2_2_2","first-page":"2813","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Bielova Nataliia","year":"2024","unstructured":"Nataliia Bielova, Laura Litvine, Anysia Nguyen, Mariam Chammat, Vincent Toubiana, and Estelle Hary. 2024. The Effect of Design Patterns on (Present and Future) Cookie Consent Decisions. In 33rd USENIX Security Symposium (USENIX Security 24). 2813\u20132830."},{"key":"e_1_3_3_2_3_2","unstructured":"Michal Bobek. 2018. OPINION OF ADVOCATE GENERAL. (2018). https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/HTML\/?uri=CELEX:62017CC0040"},{"key":"e_1_3_3_2_4_2","first-page":"1723","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Bouhoula Ahmed","year":"2024","unstructured":"Ahmed Bouhoula, Karel Kubicek, Amit Zac, Carlos Cotrini, and David Basin. 2024. Automated Large-Scale Analysis of Cookie Notice Compliance. In 33rd USENIX Security Symposium (USENIX Security 24). 1723\u20131739. https:\/\/www.usenix.org\/conference\/usenixsecurity24\/presentation\/bouhoula?utm_source=LawyerExMachina&utm_medium=email&utm_campaign=post-eclipse"},{"key":"e_1_3_3_2_5_2","doi-asserted-by":"publisher","DOI":"10.1145\/3544548.3580725"},{"key":"e_1_3_3_2_6_2","unstructured":"Wolfie Christl and Alan Toner. 2024. Pervasive identity surveillance for marketing purposes. (2024)."},{"key":"e_1_3_3_2_7_2","volume-title":"Guidelines on the concepts of controller and processor in the GDPR","author":"Board European Data Protection","year":"2020","unstructured":"European Data Protection Board. 2020. Guidelines on the concepts of controller and processor in the GDPR. Technical Report. https:\/\/www.edpb.europa.eu\/sites\/default\/files\/consultation\/edpb_guidelines_202007_controllerprocessor_en.pdf"},{"key":"e_1_3_3_2_8_2","unstructured":"European Parliament. 2016. REGULATION (EU) 2016\/ 679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL - of 27 April 2016 - on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/ 46\/ EC (General Data Protection Regulation). (2016)."},{"key":"e_1_3_3_2_9_2","unstructured":"European Union. 2002. Directive 2002\/58\/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) OJ L 201."},{"key":"e_1_3_3_2_10_2","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW51379.2020.00051"},{"key":"e_1_3_3_2_11_2","doi-asserted-by":"publisher","unstructured":"Tarleton Gillespie. 2010. The politics of \u2018platforms\u2019. New Media & Society 12 3 (May 2010) 347\u2013364. 10.1177\/1461444809342738","DOI":"10.1177\/1461444809342738"},{"key":"e_1_3_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445779"},{"key":"e_1_3_3_2_13_2","doi-asserted-by":"publisher","unstructured":"Greg Guest Arwen Bunce and Laura Johnson. 2006. How Many Interviews Are Enough?: An Experiment with Data Saturation and Variability. Field Methods 18 1 (Feb. 2006) 59\u201382. 10.1177\/1525822X05279903Publisher: SAGE Publications Inc.","DOI":"10.1177\/1525822X05279903"},{"key":"e_1_3_3_2_14_2","doi-asserted-by":"publisher","DOI":"10.1145\/3491102.3501985"},{"key":"e_1_3_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423647"},{"key":"e_1_3_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.23919\/TMA58422.2023.10198936"},{"key":"e_1_3_3_2_17_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-78120-0_14"},{"key":"e_1_3_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.5555\/3620237.3620300"},{"key":"e_1_3_3_2_19_2","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP57164.2023.00055"},{"key":"e_1_3_3_2_20_2","volume-title":"Interview","author":"Kvale Steinar","year":"2015","unstructured":"Steinar Kvale and Svend Brinkmann. 2015. Interview. Hans Reitzels Forlag."},{"key":"e_1_3_3_2_21_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23386"},{"key":"e_1_3_3_2_22_2","doi-asserted-by":"publisher","DOI":"10.1145\/3603216.3624966"},{"key":"e_1_3_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.1145\/3559613.3563205"},{"key":"e_1_3_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.1145\/3706598.3713648"},{"key":"e_1_3_3_2_25_2","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376321"},{"key":"e_1_3_3_2_26_2","unstructured":"OpenAI. 2025. openai\/whisper. https:\/\/github.com\/openai\/whisper original-date: 2022-09-16T20:02:54Z."},{"key":"e_1_3_3_2_27_2","doi-asserted-by":"publisher","DOI":"10.1145\/3618257.3624846"},{"key":"e_1_3_3_2_28_2","volume-title":"Europe\u2019s Hidden Security Crisis","author":"Ryan Johnny","year":"2023","unstructured":"Johnny Ryan and Wolfie Christl. 2023. Europe\u2019s Hidden Security Crisis. Technical Report."},{"key":"e_1_3_3_2_29_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-76663-4_3"},{"key":"e_1_3_3_2_30_2","doi-asserted-by":"crossref","unstructured":"Kjeld Schmidt and Liam Bannon. 1992. Taking CSCW seriously: Supporting Articulation Work. Computer Supported Cooperative Work 1 (March 1992) 7\u201340.","DOI":"10.1007\/BF00752449"},{"key":"e_1_3_3_2_31_2","doi-asserted-by":"publisher","unstructured":"Alina St\u00f6ver Nina Gerber Henning Prid\u00f6hl Max Maass Sebastian Bretthauer Indra D\u00f6hmann Matthias Hollick and Dominik Herrmann. 2023. How Website Owners Face Privacy Issues: Thematic Analysis of Responses from a Covert Notification Study Reveals Diverse Circumstances and Challenges. Proceedings on Privacy Enhancing Technologies 2023 (April 2023) 251\u2013264. 10.56553\/popets-2023-0051","DOI":"10.56553\/popets-2023-0051"},{"key":"e_1_3_3_2_32_2","doi-asserted-by":"publisher","unstructured":"Michael Toth Nataliia Bielova and Vincent Roca. 2022. On dark patterns and manipulation of website publishers by CMPs. Proceedings on Privacy Enhancing Technologies 2022 3 (July 2022) 478\u2013497. 10.56553\/popets-2022-0082","DOI":"10.56553\/popets-2022-0082"},{"key":"e_1_3_3_2_33_2","volume-title":"Qualitative Research Methods","author":"Tracy Sarah\u00a0J","year":"2020","unstructured":"Sarah\u00a0J Tracy. 2020. Qualitative Research Methods. Wiley."},{"key":"e_1_3_3_2_34_2","doi-asserted-by":"publisher","unstructured":"Daniel\u00a0W. Woods and Rainer B\u00f6hme. 2022. The commodification of consent. Computers & Security 115 (April 2022) 102605. 10.1016\/j.cose.2022.102605","DOI":"10.1016\/j.cose.2022.102605"}],"event":{"name":"CHI EA '25: Extended Abstracts of the CHI Conference on Human Factors in Computing Systems","location":"Yokohama Japan","acronym":"CHI EA '25","sponsor":["SIGCHI ACM Special Interest Group on Computer-Human Interaction"]},"container-title":["Proceedings of the Extended Abstracts of the CHI Conference on Human Factors in Computing Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3706599.3720002","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3706599.3720002","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T01:18:47Z","timestamp":1750295927000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3706599.3720002"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4,25]]},"references-count":33,"alternative-id":["10.1145\/3706599.3720002","10.1145\/3706599"],"URL":"https:\/\/doi.org\/10.1145\/3706599.3720002","relation":{},"subject":[],"published":{"date-parts":[[2025,4,25]]},"assertion":[{"value":"2025-04-25","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}