An Empirical Evaluation of the Implementation of the California Consumer
Privacy Act (CCPA)
- URL: http://arxiv.org/abs/2205.09897v2
- Date: Mon, 12 Sep 2022 04:30:00 GMT
- Title: An Empirical Evaluation of the Implementation of the California Consumer
Privacy Act (CCPA)
- Authors: Trong Nguyen
- Abstract summary: On January 1, 2020, California passed the California Consumer Privacy Act (CCPA) by more than 56% of voters.
This paper was about an empirical evaluation of the implementation of the California Consumer Privacy Act.
- Score: 0.0
- License: http://creativecommons.org/licenses/by/4.0/
- Abstract: On January 1, 2020, California passed the California Consumer Privacy Act
(CCPA) by more than 56% of voters intended to enhance privacy rights and
consumer protection for residents of California, United States. Since then,
more conditions have been added to the Act to support consumers' privacy. In
addition, two years after the first effective day of CCPA, consumers have seen
California organizations apply approaches to adapt to CCPA. Many organizations
quickly upgrade their policy to comply with the legislation and create
effective platforms such as data portals that allow consumers to exercise their
privacy rights. However, on the other hand, we still noticed aspects of CCPA
being absent on some websites. Additionally, we found no prior evaluation of
the CCPA implementation in organizations. Therefore, the convergence of the
regulatory landscape and the organization's privacy policy needs to be studied.
This paper was about an empirical evaluation of the implementation of the
California Consumer Privacy Act. The report includes the evaluations of the
following industries: social media, financial institutions, mortgages,
healthcare providers, and academic institutions. Our approach was to set up a
criteria table constructed from the CCPA Act and then use that table as a
checklist while reviewing a company's privacy notice. Finally, we concluded
this paper with an online tool application design that verifies the CCPA
implementation. Upon completion, the application would be free to use so
consumers can quickly inspect a website for CCPA compliance. Additionally, it
is an advising tool that a website admin can utilize to enhance CCPA compliance
for their website. The conjunction of this empirical report and a practical
application function as a stimulus to promote CCPA implementation in
organizations and deliver awareness to consumers about privacy rights they can
demand.
Related papers
- Measuring Compliance with the California Consumer Privacy Act Over Space and Time [7.971611687303297]
The California Consumer Privacy Act (CCPA) mandates that online businesses offer consumers the option to opt out of the sale and sharing of personal information.
Our study automatically tracks the presence of the opt-out link longitudinally across multiple states after the California Privacy Rights Act (CPRA) went into effect.
We find a number of websites that implement the opt-out link early and across all examined states but also find a significant number of CCPA-subject websites that fail to offer any opt-out methods even when CCPA is in effect.
arXiv Detail & Related papers (2024-03-25T21:57:31Z) - Privacy Policies and Consent Management Platforms: Growth and Users'
Interactions over Time [4.356242302111725]
Consent platforms (CMPs) have emerged as practical solutions to make it easier for website administrators to manage user consent.
This paper presents a detailed analysis of the evolution of CMPs spanning nine years.
We observe how even small changes in the design of Privacy Banners have a critical impact on the user's giving or denying their consent to data collection.
arXiv Detail & Related papers (2024-02-28T13:36:27Z) - SoK: The Gap Between Data Rights Ideals and Reality [46.14715472341707]
Do rights-based privacy laws effectively empower individuals over their data?
This paper scrutinizes these approaches by reviewing empirical studies, news articles, and blog posts.
arXiv Detail & Related papers (2023-12-03T21:52:51Z) - Protecting User Privacy in Online Settings via Supervised Learning [69.38374877559423]
We design an intelligent approach to online privacy protection that leverages supervised learning.
By detecting and blocking data collection that might infringe on a user's privacy, we can restore a degree of digital privacy to the user.
arXiv Detail & Related papers (2023-04-06T05:20:16Z) - Lessons in VCR Repair: Compliance of Android App Developers with the
California Consumer Privacy Act (CCPA) [4.429726534947266]
The California Consumer Privacy Act (CCPA) provides California residents with a range of enhanced privacy protections and rights.
Our research investigated the extent to which Android app developers comply with the provisions of the CCPA.
We compare the actual network traffic of 109 apps that we believe must comply with the CCPA to the data that apps state they collect in their privacy policies.
arXiv Detail & Related papers (2023-04-03T13:02:49Z) - Having your Privacy Cake and Eating it Too: Platform-supported Auditing
of Social Media Algorithms for Public Interest [70.02478301291264]
Social media platforms curate access to information and opportunities, and so play a critical role in shaping public discourse.
Prior studies have used black-box methods to show that these algorithms can lead to biased or discriminatory outcomes.
We propose a new method for platform-supported auditing that can meet the goals of the proposed legislation.
arXiv Detail & Related papers (2022-07-18T17:32:35Z) - Fighting the Fog: Evaluating the Clarity of Privacy Disclosures in the
Age of CCPA [29.56312492076473]
Vagueness and ambiguity in privacy policies threaten the ability of consumers to make informed choices about how businesses collect, use, and share personal information.
The California Consumer Privacy Act (CCPA) of 2018 was intended to provide Californian consumers with more control by mandating that businesses clearly disclose their data practices.
Our results suggest that CCPA's mandates for privacy disclosures, as currently implemented, have not yet yielded the level of clarity they were designed to deliver.
arXiv Detail & Related papers (2021-09-28T15:40:57Z) - Is Downloading this App Consistent with my Values? Conceptualizing a
Value-Centered Privacy Assistant [0.0]
I propose that data privacy decisions can be understood as an expression of user values.
I further propose the creation of a value-centered privacy assistant (VcPA)
arXiv Detail & Related papers (2021-06-23T15:08:58Z) - PCAL: A Privacy-preserving Intelligent Credit Risk Modeling Framework
Based on Adversarial Learning [111.19576084222345]
This paper proposes a framework of Privacy-preserving Credit risk modeling based on Adversarial Learning (PCAL)
PCAL aims to mask the private information inside the original dataset, while maintaining the important utility information for the target prediction task performance.
Results indicate that PCAL can learn an effective, privacy-free representation from user data, providing a solid foundation towards privacy-preserving machine learning for credit risk analysis.
arXiv Detail & Related papers (2020-10-06T07:04:59Z) - A vision for global privacy bridges: Technical and legal measures for
international data markets [77.34726150561087]
Despite data protection laws and an acknowledged right to privacy, trading personal information has become a business equated with "trading oil"
An open conflict is arising between business demands for data and a desire for privacy.
We propose and test a vision of a personal information market with privacy.
arXiv Detail & Related papers (2020-05-13T13:55:50Z) - Beyond privacy regulations: an ethical approach to data usage in
transportation [64.86110095869176]
We describe how Federated Machine Learning can be applied to the transportation sector.
We see Federated Learning as a method that enables us to process privacy-sensitive data, while respecting customer's privacy.
arXiv Detail & Related papers (2020-04-01T15:10:12Z)
This list is automatically generated from the titles and abstracts of the papers in this site.
This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.