Logo des Repositoriums
 

“Data Protection Can Sometimes Be a Nuisance” A Notification Study on Data Sharing Practices in City Apps

Kurzanzeige
dc.contributor.authorDrescher, Jan Niklas
dc.contributor.authorMoser, Jakob
dc.contributor.authorStrangmann, Nicolas
dc.contributor.authorSpinner, Jonas
dc.contributor.authorHerrmann, Dominik
dc.contributor.authorVolkamer, Melanie
dc.date.accessioned2024-08-21T11:08:35Z
dc.date.available2024-08-21T11:08:35Z
dc.date.issued2024
dc.description.abstractDespite the strict requirements regarding the justification of data sharing imposed by the General Data Protection Regulation (GDPR), many mobile apps, even those provided by European states, share user data with third parties without justification or consent. To assess data sharing of city apps, we analyzed 138 apps from German cities for non-compliance with the GDPR. We found that 70 of these apps contacted third-party services outside the European Union without user consent, making them potentially non-compliant with current European privacy regulations. To investigate what information helps app vendors to remediate the issue, we sent three types of notifications to potentially non-compliant vendors: A generic one, one with detailed technical guidance to achieve compliance, and one with a detailed legal explanation. We observed a response rate of 37% and fix rates of approximately 17% for the two groups that received detailed notifications. Thereby, we found that both technical guidance and legal explanations significantly increase the number of fixed apps, compared to just sending generic notifications. While the response rate was higher than during comparable studies, we observed high distrust in our messages, similar to related work. Surprisingly, we found that many of the app vendors who promised to remediate the issue, did not do so successfully, while others silently patched their app.en
dc.identifier.doi10.18420/muc2024-mci-ws17-159
dc.identifier.urihttps://dl.gi.de/handle/20.500.12116/44292
dc.language.isoen
dc.publisherGesellschaft für Informatik e.V.
dc.relation.ispartofMensch und Computer 2024 - Workshopband
dc.relation.ispartofseriesMensch und Computer
dc.rightshttps://creativecommons.org/licenses/by/4.0/
dc.rights.urihttps://creativecommons.org/licenses/by/4.0/
dc.title“Data Protection Can Sometimes Be a Nuisance” A Notification Study on Data Sharing Practices in City Appsen
dc.typeText/Workshop Paper
gi.conference.date1.-4. September 2024
gi.conference.locationKarlsruhe
gi.conference.sessiontitleMCI-WS17: Usable Security und Privacy Workshop

Dateien

Originalbündel
1 - 1 von 1
Vorschaubild nicht verfügbar
Name:
muc2024-mci-ws17-159.pdf
Größe:
561.4 KB
Format:
Adobe Portable Document Format
Herunterladen

Sammlungen

Workshopband MuC 2024