SoylentNews

canopic jug writes:

Glyn Moody writes a blog post at Private Internet Access about how users are steered into accepting terms and conditions which are against their own interests. Even after the advent of the GDPR, and even though users theoretically can change their privacy settings to optimize protection for their personal data, they usually don't. One of the reasons is because it requires effort and thus people mostly accept the defaults through inaction. However, it turns out there are other issues because of the use of user interfaces carefully crafted to trick users into doing things they might not otherwise do, a practice some label "dark patterns".

Brignull runs a site called Dark Patterns, which includes a “hall of shame” with real-life examples of dark patterns, and a list of common types. One of these is “Privacy Zuckering”, where “You are tricked into publicly sharing more information about yourself than you really intended to. Named after Facebook CEO Mark Zuckerberg.” A free report, “Deceived by Design“, funded by the Norwegian Consumer Council, reveals that top sites have recently been engaging in “Privacy Zuckering” to undermine the GDPR and its privacy protections. The report explores how Facebook, Google and Microsoft handled the process of updating their privacy settings to meet the GDPR’s more stringent requirements. Specifically, the researchers explored a “Review your data settings” pop-up from Facebook, “A privacy reminder” pop-up from Google, and a Windows 10 Settings page presented as part of a system update. Both Facebook and Google fare badly in terms of protecting privacy by default.

More details can be found in a report by the Norwegian Consumer Council, entitled Deceived by Design: How tech companies use dark patterns to discourage us from exercising our rights to privacy (warning for PDF).

Original Submission