{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T12:18:59Z","timestamp":1783426739128,"version":"3.54.6"},"publisher-location":"New York, NY, USA","reference-count":46,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,4,12]],"date-time":"2026-04-12T00:00:00Z","timestamp":1775952000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"National Intelligence Post-doctoral Fellowship","award":["ONI-NIPG24-Haggag"],"award-info":[{"award-number":["ONI-NIPG24-Haggag"]}]},{"name":"ARC Laureate Fellowship","award":["FL190100035"],"award-info":[{"award-number":["FL190100035"]}]},{"name":"Discovery Project","award":["DP200100020"],"award-info":[{"award-number":["DP200100020"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,4,12]]},"DOI":"10.1145\/3786581.3786938","type":"proceedings-article","created":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T11:31:09Z","timestamp":1783423869000},"page":"154-165","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Click, Scroll, Consent: Uncovering Australia\u2019s Privacy Knowledge Crisis"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2346-3131","authenticated-orcid":false,"given":"Omar","family":"Haggag","sequence":"first","affiliation":[{"name":"Monash University, Melbourne, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4928-7076","authenticated-orcid":false,"given":"John","family":"Grundy","sequence":"additional","affiliation":[{"name":"Monash University, Melbourne, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6138-7742","authenticated-orcid":false,"given":"Mohan Baruwal","family":"Chhetri","sequence":"additional","affiliation":[{"name":"CSIRO's Data61, Melbourne, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,7,7]]},"reference":[{"key":"e_1_3_3_1_2_2","first-page":"674","volume-title":"Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security (CCS)","author":"Acar Gunes","year":"2014","unstructured":"Gunes Acar, Christian Eubank, Steven Englehardt, Marc Juarez, Arvind Narayanan, and Claudia Diaz. 2014. The Web Never Forgets: Persistent Tracking Mechanisms in the Wild. In Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security (CCS). ACM, 674\u2013689."},{"key":"e_1_3_3_1_3_2","doi-asserted-by":"crossref","unstructured":"Alessandro Acquisti Laura Brandimarte and George Loewenstein. 2015. Privacy and human behavior in the age of information. Science 347 6221 (2015) 509\u2013514.","DOI":"10.1126\/science.aaa1465"},{"key":"e_1_3_3_1_4_2","doi-asserted-by":"crossref","unstructured":"Alessandro Acquisti Curtis Taylor and Liad Wagman. 2016. The economics of privacy. Journal of economic Literature 54 2 (2016) 442\u2013492.","DOI":"10.1257\/jel.54.2.442"},{"key":"e_1_3_3_1_5_2","doi-asserted-by":"crossref","first-page":"15","DOI":"10.1145\/3194770.3194778","volume-title":"Proceedings of the international workshop on software fairness","author":"Aydemir Fatma\u00a0Ba\u015fak","year":"2018","unstructured":"Fatma\u00a0Ba\u015fak Aydemir and Fabiano Dalpiaz. 2018. A roadmap for ethics-aware software engineering. In Proceedings of the international workshop on software fairness. 15\u201321."},{"key":"e_1_3_3_1_6_2","doi-asserted-by":"crossref","unstructured":"Susanne Barth and Menno\u00a0DT De\u00a0Jong. 2017. The privacy paradox\u2013Investigating discrepancies between expressed privacy concerns and actual online behavior\u2013A systematic literature review. Telematics and informatics 34 7 (2017) 1038\u20131058.","DOI":"10.1016\/j.tele.2017.04.013"},{"key":"e_1_3_3_1_7_2","doi-asserted-by":"crossref","unstructured":"France B\u00e9langer and Robert\u00a0E Crossler. 2011. Privacy in the digital age: A review of information privacy research in information systems. MIS Quarterly 35 4 (2011) 1017\u20131041.","DOI":"10.2307\/41409971"},{"key":"e_1_3_3_1_8_2","volume-title":"The Governance of Privacy: Policy Instruments in Global Perspective","author":"Bennett Colin\u00a0J.","year":"2006","unstructured":"Colin\u00a0J. Bennett and Charles\u00a0D. Raab. 2006. The Governance of Privacy: Policy Instruments in Global Perspective. MIT Press."},{"key":"e_1_3_3_1_9_2","volume-title":"Privacy by Design: The 7 Foundational Principles","author":"Cavoukian Ann","year":"2011","unstructured":"Ann Cavoukian. 2011. Privacy by Design: The 7 Foundational Principles. Information and Privacy Commissioner of Ontario, Toronto, Canada."},{"key":"e_1_3_3_1_10_2","first-page":"1","volume-title":"Proceedings of the 2020 CHI Conference on Human Factors in Computing Systems","author":"Colnago Jessica","year":"2020","unstructured":"Jessica Colnago, Yixin Liu, Yuanyuan Zhang, Alessandro Acquisti, Lorrie\u00a0Faith Cranor, and Norman Sadeh. 2020. Informing the design of a personalized privacy assistant for the Internet of Things. In Proceedings of the 2020 CHI Conference on Human Factors in Computing Systems. 1\u201313."},{"key":"e_1_3_3_1_11_2","first-page":"273","volume-title":"Journal of Telecommunications and High Technology Law","author":"Cranor Lorrie\u00a0Faith","year":"2012","unstructured":"Lorrie\u00a0Faith Cranor. 2012. Necessary but Not Sufficient: Standardized Mechanisms for Privacy Notice and Choice. In Journal of Telecommunications and High Technology Law , Vol.\u00a010. 273\u2013307."},{"key":"e_1_3_3_1_12_2","doi-asserted-by":"crossref","unstructured":"Martin Degeling Christine Utz Christopher Lentzsch Henry Hosseini Florian Schaub and Thorsten Holz. 2018. We value your privacy... now take some cookies: Measuring the GDPR\u2019s impact on web privacy. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1808.05096 (2018).","DOI":"10.14722\/ndss.2019.23378"},{"key":"e_1_3_3_1_13_2","unstructured":"Elizabeth Denham. 2021. GDPR and Beyond: A Global Movement for Privacy Protection. https:\/\/ico.org.uk\/about-the-ico\/news-and-events\/news-and-blogs\/2021\/01\/gdpr-and-beyond\/. Accessed: 2025-09-15."},{"key":"e_1_3_3_1_14_2","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-030-30371-6","volume-title":"Responsible Artificial Intelligence: Developing and Using AI in a Responsible Way","author":"Dignum Virginia","year":"2019","unstructured":"Virginia Dignum. 2019. Responsible Artificial Intelligence: Developing and Using AI in a Responsible Way. Springer."},{"key":"e_1_3_3_1_15_2","doi-asserted-by":"crossref","unstructured":"Nora\u00a0A Draper and Joseph Turow. 2019. The corporate cultivation of digital resignation. New media & society 21 8 (2019) 1824\u20131839.","DOI":"10.1177\/1461444819833331"},{"key":"e_1_3_3_1_16_2","volume-title":"Data Feminism","author":"D\u2019Ignazio Catherine","year":"2020","unstructured":"Catherine D\u2019Ignazio and Lauren\u00a0F. Klein. 2020. Data Feminism. MIT Press."},{"key":"e_1_3_3_1_17_2","first-page":"1388","volume-title":"Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (CCS)","author":"Englehardt Steven","year":"2016","unstructured":"Steven Englehardt and Arvind Narayanan. 2016. Online Tracking: A 1-million-site Measurement and Analysis. In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (CCS). ACM, 1388\u20131401."},{"key":"e_1_3_3_1_18_2","doi-asserted-by":"crossref","DOI":"10.1007\/978-981-15-0493-8","volume-title":"Privacy in Dynamical Systems","author":"Farokhi Farhad","year":"2020","unstructured":"Farhad Farokhi. 2020. Privacy in Dynamical Systems. Springer."},{"key":"e_1_3_3_1_19_2","series-title":"(CHI \u201918)","first-page":"534:1\u2013534:14","volume-title":"Proceedings of the CHI Conference on Human Factors in Computing Systems","author":"Gray Colin\u00a0M.","year":"2018","unstructured":"Colin\u00a0M. Gray, Yubo Kou, Bryan Battles, Joseph Hoggatt, and Austin\u00a0L. Toombs. 2018. The Dark (Patterns) Side of UX Design. In Proceedings of the CHI Conference on Human Factors in Computing Systems(CHI \u201918). ACM, 534:1\u2013534:14."},{"key":"e_1_3_3_1_20_2","unstructured":"Graham Greenleaf. 2014. Global Data Privacy Laws 2015: 109 Countries and Growing. Privacy Laws & Business International Report 133 (2014) 10\u201313."},{"key":"e_1_3_3_1_21_2","unstructured":"Graham Greenleaf. 2017. Global Data Privacy Laws 2017: 120 National Data Privacy Laws Including Indonesia and Turkey. Privacy Laws & Business International Report 10-13; UNSW Law Research Paper No. 45."},{"key":"e_1_3_3_1_22_2","volume-title":"Computers, Privacy and Data Protection Conference","author":"G\u00fcrses Seda","year":"2011","unstructured":"Seda G\u00fcrses, Carmela Troncoso, and Claudia Diaz. 2011. Engineering privacy by design. In Computers, Privacy and Data Protection Conference."},{"key":"e_1_3_3_1_23_2","doi-asserted-by":"crossref","unstructured":"Omar Haggag John Grundy Mohamed Abdelrazek and Sherif Haggag. 2022. A large scale analysis of mHealth app user reviews. Empirical Software Engineering 27 7 (2022) 196.","DOI":"10.1007\/s10664-022-10222-6"},{"key":"e_1_3_3_1_24_2","first-page":"48","volume-title":"2021 IEEE\/ACM 43rd International Conference on Software Engineering: Software Engineering in Society (ICSE-SEIS)","author":"Haggag Omar","year":"2021","unstructured":"Omar Haggag, Sherif Haggag, John Grundy, and Mohamed Abdelrazek. 2021. COVID-19 vs social media apps: does privacy really matter?. In 2021 IEEE\/ACM 43rd International Conference on Software Engineering: Software Engineering in Society (ICSE-SEIS). IEEE, 48\u201357."},{"key":"e_1_3_3_1_25_2","volume-title":"PrivacyOs Blueprint: The Battle to Control the Design of New Technologies","author":"Hartzog Woodrow","year":"2018","unstructured":"Woodrow Hartzog. 2018. PrivacyOs Blueprint: The Battle to Control the Design of New Technologies. Harvard University Press."},{"key":"e_1_3_3_1_26_2","unstructured":"Aleecia\u00a0M. McDonald and Lorrie\u00a0Faith Cranor. 2008. The Cost of Reading Privacy Policies. I\/S: A Journal of Law and Policy for the Information Society 4 3 (2008) 543\u2013568."},{"key":"e_1_3_3_1_27_2","first-page":"1","volume-title":"Proceedings of the 2021 CHI Conference on Human Factors in Computing Systems","author":"Narayanan Arvind","year":"2021","unstructured":"Arvind Narayanan, Arunesh Mathur, and Marshini Chetty. 2021. Dark Patterns: Past, Present, and Future. In Proceedings of the 2021 CHI Conference on Human Factors in Computing Systems. ACM, 1\u201318."},{"key":"e_1_3_3_1_28_2","unstructured":"Helen Nissenbaum. 2004. Privacy as contextual integrity. Wash. L. Rev. 79 (2004) 119."},{"key":"e_1_3_3_1_29_2","doi-asserted-by":"crossref","DOI":"10.1515\/9780804772891","volume-title":"Privacy in context","author":"Nissenbaum Helen","year":"2009","unstructured":"Helen Nissenbaum. 2009. Privacy in context: Technology, policy, and the integrity of social life. In Privacy in context. Stanford University Press."},{"key":"e_1_3_3_1_30_2","doi-asserted-by":"crossref","unstructured":"Helen Nissenbaum. 2011. A contextual approach to privacy online. Daedalus 140 4 (2011) 32\u201348.","DOI":"10.1162\/DAED_a_00113"},{"key":"e_1_3_3_1_31_2","doi-asserted-by":"crossref","unstructured":"Patricia\u00a0A. Norberg Daniel\u00a0R. Horne and David\u00a0A. Horne. 2007. The Privacy Paradox: Personal Information Disclosure Intentions versus Behaviors. Journal of Consumer Affairs 41 1 (2007) 100\u2013126.","DOI":"10.1111\/j.1745-6606.2006.00070.x"},{"key":"e_1_3_3_1_32_2","doi-asserted-by":"crossref","unstructured":"M. Nouwens D. Liccardi M. Veale I.\u00a0K. Vasalou and L. Sassoon. 2020. Dark Patterns after the GDPR: Scraping Consent Pop-Ups and Demonstrating Their Influence. CHI \u201920: Proceedings of the 2020 CHI Conference on Human Factors in Computing Systems (2020) 1\u201313.","DOI":"10.1145\/3313831.3376321"},{"key":"e_1_3_3_1_33_2","unstructured":"Office of the Australian Information Commissioner. 1988. Privacy Act 1988. https:\/\/www.oaic.gov.au\/privacy\/the-privacy-act. Accessed: 2025-09-15."},{"key":"e_1_3_3_1_34_2","unstructured":"Office of the Australian Information Commissioner. 2023. OAIC Annual Report 2022\u201323. https:\/\/www.oaic.gov.au. Accessed: 2025-09-15."},{"key":"e_1_3_3_1_35_2","volume-title":"Privacy Act Review Report","author":"(OAIC) Office of the Australian Information Commissioner","year":"2023","unstructured":"Office of the Australian Information Commissioner (OAIC). 2023. Privacy Act Review Report. Technical Report. Australian Government Attorney-General\u2019s Department, Canberra, Australia."},{"key":"e_1_3_3_1_36_2","unstructured":"Neil Richards and Woodrow Hartzog. 2018. The pathologies of digital consent. Wash. UL Rev. 96 (2018) 1461."},{"key":"e_1_3_3_1_37_2","doi-asserted-by":"crossref","unstructured":"Florian Schaub Rebecca Balebako and Lorrie\u00a0Faith Cranor. 2017. Designing effective privacy notices and controls. IEEE Internet Computing 21 3 (2017) 70\u201377.","DOI":"10.1109\/MIC.2017.75"},{"key":"e_1_3_3_1_38_2","unstructured":"Paul\u00a0M Schwartz and Karl-Nikolaus Peifer. 2017. Transatlantic data privacy law. Geo. LJ 106 (2017) 115."},{"key":"e_1_3_3_1_39_2","doi-asserted-by":"crossref","unstructured":"Daniel\u00a0J Solove. 2005. A taxonomy of privacy. U. Pa. l. Rev. 154 (2005) 477.","DOI":"10.2307\/40041279"},{"key":"e_1_3_3_1_40_2","doi-asserted-by":"crossref","unstructured":"Sarah Spiekermann and Lorrie\u00a0Faith Cranor. 2009. Engineering privacy. IEEE Transactions on Software Engineering 35 1 (2009) 67\u201382.","DOI":"10.1109\/TSE.2008.88"},{"key":"e_1_3_3_1_41_2","unstructured":"Daniel Susser Beate Roessler and Helen Nissenbaum. 2019. Online manipulation: Hidden influences in a digital world. Georgetown Law Technology Review 4 1 (2019) 1\u201345."},{"key":"e_1_3_3_1_42_2","unstructured":"Joseph Turow. 2003. Americans online privacy: The system is broken. The Annenberg Public Policy Center of the University of Pennsylvania401 (2003)."},{"key":"e_1_3_3_1_43_2","volume-title":"Americans Can\u2019t Consent to Companies\u2019 Use of Their Data","author":"Turow Joseph","year":"2023","unstructured":"Joseph Turow, Nora\u00a0A. Draper, and Michael Hennessy. 2023. Americans Can\u2019t Consent to Companies\u2019 Use of Their Data. Technical Report. Annenberg School for Communication, University of Pennsylvania."},{"key":"e_1_3_3_1_44_2","volume-title":"The Tradeoff Fallacy: How Marketers Are Misrepresenting American Consumers and Opening Them up to Exploitation","author":"Turow Joseph","year":"2015","unstructured":"Joseph Turow, Michael Hennessy, and Nora Draper. 2015. The Tradeoff Fallacy: How Marketers Are Misrepresenting American Consumers and Opening Them up to Exploitation. Technical Report. Annenberg School for Communication, University of Pennsylvania."},{"key":"e_1_3_3_1_45_2","first-page":"973","volume-title":"Proceedings of the 2019 acm sigsac conference on computer and communications security","author":"Utz Christine","year":"2019","unstructured":"Christine Utz, Martin Degeling, Sascha Fahl, Florian Schaub, and Thorsten Holz. 2019. (Un) informed consent: Studying GDPR consent notices in the field. In Proceedings of the 2019 acm sigsac conference on computer and communications security. 973\u2013990."},{"key":"e_1_3_3_1_46_2","unstructured":"Philip\u00a0Fei Wu Jessica Vitak and Michael\u00a0T Zimmer. 2020. A contextual approach to information privacy research. Journal of the Association for Information Science and Technology 71 4 (2020) 485\u2013490."},{"key":"e_1_3_3_1_47_2","volume-title":"The Age of Surveillance Capitalism: The Fight for a Human Future at the New Frontier of Power","author":"Zuboff Shoshana","year":"2019","unstructured":"Shoshana Zuboff. 2019. The Age of Surveillance Capitalism: The Fight for a Human Future at the New Frontier of Power. Profile Books, London."}],"event":{"name":"ICSE-SEIS '26: 2026 IEEE\/ACM 48th International Conference on Software Engineering","location":"Rio de Janeiro Brazil","acronym":"ICSE-SEIS '26","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering"]},"container-title":["Proceedings of the IEEE\/ACM 48th International Conference on Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3786581.3786938","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T11:49:30Z","timestamp":1783424970000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3786581.3786938"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,12]]},"references-count":46,"alternative-id":["10.1145\/3786581.3786938","10.1145\/3786581"],"URL":"https:\/\/doi.org\/10.1145\/3786581.3786938","relation":{},"subject":[],"published":{"date-parts":[[2026,4,12]]},"assertion":[{"value":"2026-07-07","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}