{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,10]],"date-time":"2026-01-10T03:54:39Z","timestamp":1768017279596,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":54,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,10,13]]},"DOI":"10.1145\/3733802.3764052","type":"proceedings-article","created":{"date-parts":[[2025,11,18]],"date-time":"2025-11-18T09:38:21Z","timestamp":1763458701000},"page":"198-207","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Exploring the Enforcement of Cookie Notices across Continents: An Empirical Study"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-0525-1565","authenticated-orcid":false,"given":"Jean Luc","family":"Intumwayase","sequence":"first","affiliation":[{"name":"Univ. Lille, CNRS, Inria, Lille, France"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-7613-0428","authenticated-orcid":false,"given":"Imane","family":"Fouad","sequence":"additional","affiliation":[{"name":"Mohammed VI Polytechnic University, Rabat, Morocco"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6901-3596","authenticated-orcid":false,"given":"Pierre","family":"Laperdrix","sequence":"additional","affiliation":[{"name":"CNRS, Inria Lille, Lille, France"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1771-8791","authenticated-orcid":false,"given":"Romain","family":"Rouvoy","sequence":"additional","affiliation":[{"name":"Univ. Lille \/ Inria, Lille, France"}]}],"member":"320","published-online":{"date-parts":[[2025,11,18]]},"reference":[{"key":"e_1_3_3_2_2_2","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423626"},{"key":"e_1_3_3_2_3_2","doi-asserted-by":"publisher","unstructured":"Carlos Bermejo\u00a0Fernandez Dimitris Chatzopoulos Dimitrios Papadopoulos and Pan Hui. 2021. This Website Uses Nudging: MTurk Workers\u2019 Behaviour on Cookie Consent Notices. Proceedings of the ACM on Human-Computer Interaction 5 CSCW2 (Oct. 2021) 1\u201322. 10.1145\/3476087","DOI":"10.1145\/3476087"},{"key":"e_1_3_3_2_4_2","first-page":"2893","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Bollinger Dino","year":"2022","unstructured":"Dino Bollinger, Karel Kubicek, Carlos Cotrini, and David Basin. 2022. Automating Cookie Consent and GDPR Violation Detection. In 31st USENIX Security Symposium (USENIX Security 22). USENIX Association, Boston, MA, 2893\u20132910. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/bollinger"},{"key":"e_1_3_3_2_5_2","unstructured":"G. Bradski. 2000. The OpenCV Library. Dr. Dobb\u2019s Journal of Software Tools (2000)."},{"key":"e_1_3_3_2_6_2","doi-asserted-by":"crossref","unstructured":"Edna\u00a0Dias Canedo Angelica Toffano\u00a0Seidel Calazans Ian\u00a0Nery Bandeira Pedro Henrique\u00a0Teixeira Costa and Eloisa Toffano\u00a0Seidel Masson. 2022. Guidelines adopted by agile teams in privacy requirements elicitation after the Brazilian general data protection law (LGPD) implementation. Requirements Engineering 27 4 (2022) 545\u2013567.","DOI":"10.1007\/s00766-022-00391-7"},{"key":"e_1_3_3_2_7_2","doi-asserted-by":"crossref","unstructured":"Preeti\u00a0S Chauhan and Nir Kshetri. 2021. 2021 state of the practice in data privacy and security. Computer 54 8 (2021) 125\u2013132.","DOI":"10.1109\/MC.2021.3083916"},{"key":"e_1_3_3_2_8_2","doi-asserted-by":"crossref","unstructured":"Michelle De\u00a0Bruyn et\u00a0al. 2014. The protection of personal information (POPI) act-impact on South Africa. International Business & Economics Research Journal (IBER) 13 6 (2014) 1315\u20131340.","DOI":"10.19030\/iber.v13i6.8922"},{"key":"e_1_3_3_2_9_2","doi-asserted-by":"crossref","unstructured":"Martin Degeling Christine Utz Christopher Lentzsch Henry Hosseini Florian Schaub and Thorsten Holz. 2018. We value your privacy... now take some cookies: Measuring the GDPR\u2019s impact on web privacy. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1808.05096 (2018).","DOI":"10.14722\/ndss.2019.23378"},{"key":"e_1_3_3_2_10_2","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978313"},{"key":"e_1_3_3_2_11_2","unstructured":"Abigayle Erickson. 2018. Comparative Analysis of the EU\u2019s GDPR and Brazil\u2019s LGPD: Enforcement Challenges with the LGPD. Brook. J. Int\u2019l L. 44 (2018) 859."},{"key":"e_1_3_3_2_12_2","volume-title":"Compliance with Brazil\u2019s New Data Privacy Legislation: What US Companies Need to Know: F. Passos, Khyara","author":"F\u00a0Passos Khyara","year":"2021","unstructured":"Khyara F\u00a0Passos. 2021. Compliance with brazil\u2019s new data privacy legislation: What us companies need to know. In Compliance with Brazil\u2019s New Data Privacy Legislation: What US Companies Need to Know: F. Passos, Khyara. [Sl]: SSRN."},{"key":"e_1_3_3_2_13_2","unstructured":"Heather Federman. 2021. Examining Virginia\u2019s New Data Protection Law. Risk Management 68 6 (2021) 8\u20139."},{"key":"e_1_3_3_2_14_2","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW51379.2020.00051"},{"key":"e_1_3_3_2_15_2","unstructured":"Nathaniel Fruchter Hsin Miao Scott Stevenson and Rebecca Balebako. 2015. Variations in tracking in relation to geographic location. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1506.04103 (2015)."},{"key":"e_1_3_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445779"},{"key":"e_1_3_3_2_17_2","doi-asserted-by":"publisher","DOI":"10.1145\/3491102.3501985"},{"key":"e_1_3_3_2_18_2","unstructured":"Philip Hausner and Michael Gertz. 2021. Dark Patterns in the Interaction with Cookie Banners. arxiv:https:\/\/arXiv.org\/abs\/2103.14956\u00a0[cs.HC]"},{"key":"e_1_3_3_2_19_2","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423647"},{"key":"e_1_3_3_2_20_2","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278561"},{"key":"e_1_3_3_2_21_2","unstructured":"Georgios Kampanos and Siamak\u00a0F. Shahandashti. 2021. Accept All: The Landscape of Cookie Banners in Greece and the UK. CoRR abs\/2104.05750 (2021). arXiv:https:\/\/arXiv.org\/abs\/2104.05750https:\/\/arxiv.org\/abs\/2104.05750"},{"key":"e_1_3_3_2_22_2","doi-asserted-by":"publisher","unstructured":"Farzaneh Karegar John\u00a0S\u00f6ren Pettersson and Simone Fischer-H\u00fcbner. 2020. The Dilemma of User Engagement in Privacy Notices: Effects of Interaction Modes and Habituation on User Attention. ACM Transactions on Privacy and Security 23 1 (Feb. 2020) 1\u201338. 10.1145\/3372296","DOI":"10.1145\/3372296"},{"key":"e_1_3_3_2_23_2","first-page":"1109","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Khandelwal Rishabh","year":"2023","unstructured":"Rishabh Khandelwal, Asmit Nayak, Hamza Harkous, and Kassem Fawaz. 2023. Automated Cookie Notice Analysis and Enforcement. In 32nd USENIX Security Symposium (USENIX Security 23). USENIX Association, Anaheim, CA, 1109\u20131126. https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/khandelwal"},{"key":"e_1_3_3_2_24_2","first-page":"1109","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Khandelwal Rishabh","year":"2023","unstructured":"Rishabh Khandelwal, Asmit Nayak, Hamza Harkous, and Kassem Fawaz. 2023. Automated cookie notice analysis and enforcement. In 32nd USENIX Security Symposium (USENIX Security 23). 1109\u20131126."},{"key":"e_1_3_3_2_25_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23386"},{"key":"e_1_3_3_2_26_2","doi-asserted-by":"publisher","DOI":"10.1109\/CompComm.2018.8780663"},{"key":"e_1_3_3_2_27_2","doi-asserted-by":"crossref","unstructured":"C\u00e9lestin Matte Nataliia Bielova and Cristiana Santos. 2019. Do Cookie Banners Respect my Choice? Measuring Legal Compliance of Banners from IAB Europe\u2019s Transparency and Consent Framework. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1911.09964 (2019).","DOI":"10.1109\/SP40000.2020.00076"},{"key":"e_1_3_3_2_28_2","doi-asserted-by":"crossref","unstructured":"Paarth Naithani. 2022. Curtailing the cookie monster through data protection by default. Tilburg Law Review 27 1 (2022) 22\u201336.","DOI":"10.5334\/tilr.311"},{"key":"e_1_3_3_2_29_2","doi-asserted-by":"publisher","DOI":"10.1145\/3491101.3519683"},{"key":"e_1_3_3_2_30_2","doi-asserted-by":"publisher","DOI":"10.1145\/3463676.3485598"},{"key":"e_1_3_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3450056"},{"key":"e_1_3_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313542"},{"key":"e_1_3_3_2_33_2","first-page":"29","volume-title":"Proceedings of the first instructional conference on machine learning","volume":"242","author":"Ramos Juan","year":"2003","unstructured":"Juan Ramos et\u00a0al. 2003. Using tf-idf to determine word relevance in document queries. In Proceedings of the first instructional conference on machine learning , Vol.\u00a0242. Citeseer, 29\u201348."},{"key":"e_1_3_3_2_34_2","unstructured":"Ali Rasaii Shivani Singh Devashish Gosain and Oliver Gasser. 2023. Exploring the Cookieverse: A Multi-Perspective Analysis of Web Cookies. http:\/\/arxiv.org\/abs\/2302.05353 arXiv:https:\/\/arXiv.org\/abs\/2302.05353 [cs]."},{"key":"e_1_3_3_2_35_2","unstructured":"Jukka Ruohonen and Kalle Hjerppe. 2020. Predicting the Amount of GDPR Fines. arxiv:https:\/\/arXiv.org\/abs\/2003.05151\u00a0[cs.CY]"},{"key":"e_1_3_3_2_36_2","doi-asserted-by":"publisher","DOI":"10.1145\/3517745.3561444"},{"key":"e_1_3_3_2_37_2","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329806"},{"key":"e_1_3_3_2_38_2","doi-asserted-by":"publisher","DOI":"10.1145\/3463676.3485611"},{"key":"e_1_3_3_2_39_2","doi-asserted-by":"publisher","DOI":"10.1145\/3463676.3485611"},{"key":"e_1_3_3_2_40_2","doi-asserted-by":"crossref","unstructured":"Kristina\u00a0P Sinaga and Miin-Shen Yang. 2020. Unsupervised K-means clustering algorithm. IEEE access 8 (2020) 80716\u201380727.","DOI":"10.1109\/ACCESS.2020.2988796"},{"key":"e_1_3_3_2_41_2","doi-asserted-by":"crossref","unstructured":"Peter Snyder Antoine Vastel and Ben Livshits. 2020. Who filters the filters: Understanding the growth usefulness and efficiency of crowdsourced ad blocking. Proceedings of the ACM on Measurement and Analysis of Computing Systems 4 2 (2020) 1\u201324.","DOI":"10.1145\/3392144"},{"key":"e_1_3_3_2_42_2","unstructured":"Than\u00a0Htut Soe Cristiana\u00a0Teixeira Santos and Marija Slavkovik. 2022. Automated detection of dark patterns in cookie banners: how to do it poorly and why it is hard to do it any other way. arxiv:https:\/\/arXiv.org\/abs\/2204.11836\u00a0[cs.LG]"},{"key":"e_1_3_3_2_43_2","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313524"},{"key":"e_1_3_3_2_44_2","doi-asserted-by":"crossref","unstructured":"Jannick\u00a0Kirk S\u00f8rensen and Hilde Van\u00a0den Bulck. 2020. Public service media online advertising and the third-party user data business: A trade versus trust dilemma? Convergence 26 2 (2020) 421\u2013447.","DOI":"10.1177\/1354856518790203"},{"key":"e_1_3_3_2_45_2","doi-asserted-by":"crossref","unstructured":"Satoshi Suzuki et\u00a0al. 1985. Topological structural analysis of digitized binary images by border following. Computer vision graphics and image processing 30 1 (1985) 32\u201346.","DOI":"10.1016\/0734-189X(85)90016-7"},{"key":"e_1_3_3_2_46_2","unstructured":"Tobias Urban Dennis Tatang Martin Degeling Thorsten Holz and Norbert Pohlmann. 2018. The unwanted sharing economy: An analysis of cookie syncing and user transparency under GDPR. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1811.08660 (2018)."},{"key":"e_1_3_3_2_47_2","doi-asserted-by":"publisher","DOI":"10.1145\/3320269.3372194"},{"key":"e_1_3_3_2_48_2","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354212"},{"key":"e_1_3_3_2_49_2","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354212"},{"key":"e_1_3_3_2_50_2","unstructured":"Rob Van\u00a0Eijk Hadi Asghari Philipp Winter and Arvind Narayanan. 2021. The impact of user location on cookie notices (inside and outside of the European Union). arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2110.09832 (2021)."},{"key":"e_1_3_3_2_51_2","unstructured":"W\u00a0Gregory Voss. 2017. First the GDPR now the proposed ePrivacy regulation. Journal of Internet Law 21 1 (2017) 3\u201311."},{"key":"e_1_3_3_2_52_2","doi-asserted-by":"crossref","unstructured":"Asma\u00a0AI Vranaki and Francesca Farmer. 2022. The Decline of Third-Party Cookies in the AdTech Sector: Of Data Protection Law and Regulation (I). Available at SSRN 4414566 (2022).","DOI":"10.2139\/ssrn.4414566"},{"key":"e_1_3_3_2_53_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICIBA50161.2020.9277337"},{"key":"e_1_3_3_2_54_2","doi-asserted-by":"publisher","DOI":"10.1145\/3463676.3485603"},{"key":"e_1_3_3_2_55_2","doi-asserted-by":"crossref","unstructured":"Frederik\u00a0J Zuiderveen\u00a0Borgesius Sanne Kruikemeier Sophie\u00a0C Boerman and Natali Helberger. 2017. Tracking walls take-it-or-leave-it choices the GDPR and the ePrivacy regulation. Eur. Data Prot. L. Rev. 3 (2017) 353.","DOI":"10.21552\/edpl\/2017\/3\/9"}],"event":{"name":"CCS '25: ACM SIGSAC Conference on Computer and Communications Security","location":"Taipei Taiwan","acronym":"WPES '25","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 24th Workshop on Privacy in the Electronic Society"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3733802.3764052","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,9]],"date-time":"2026-01-09T18:56:12Z","timestamp":1767984972000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3733802.3764052"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,13]]},"references-count":54,"alternative-id":["10.1145\/3733802.3764052","10.1145\/3733802"],"URL":"https:\/\/doi.org\/10.1145\/3733802.3764052","relation":{},"subject":[],"published":{"date-parts":[[2025,10,13]]},"assertion":[{"value":"2025-11-18","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}