{"id":"https://openalex.org/W4412373305","doi":"https://doi.org/10.56553/popets-2025-0133","title":"Johnny Can\u2019t Revoke Consent Either: Measuring Compliance of Consent Revocation on the Web","display_name":"Johnny Can\u2019t Revoke Consent Either: Measuring Compliance of Consent Revocation on the Web","publication_year":2025,"publication_date":"2025-07-13","ids":{"openalex":"https://openalex.org/W4412373305","doi":"https://doi.org/10.56553/popets-2025-0133"},"language":"en","primary_location":{"id":"doi:10.56553/popets-2025-0133","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0133","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.56553/popets-2025-0133","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028817422","display_name":"Gayatri Priyadarsini Kancherla","orcid":"https://orcid.org/0000-0002-1842-9353"},"institutions":[{"id":"https://openalex.org/I27674431","display_name":"Indian Institute of Technology Gandhinagar","ror":"https://ror.org/0036p5w23","country_code":"IN","type":"education","lineage":["https://openalex.org/I27674431"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Gayatri Priyadarsini Kancherla","raw_affiliation_strings":["Indian Institute of Technology Gandhinagar"],"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Gandhinagar","institution_ids":["https://openalex.org/I27674431"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020925462","display_name":"Nataliia Bielova","orcid":"https://orcid.org/0009-0005-0616-8394"},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en informatique et en automatique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"funder","lineage":["https://openalex.org/I1326498283"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Nataliia Bielova","raw_affiliation_strings":["Inria Centre at University C\u00f4te d'Azur"],"affiliations":[{"raw_affiliation_string":"Inria Centre at University C\u00f4te d'Azur","institution_ids":["https://openalex.org/I1326498283"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065745449","display_name":"Cristiana Santos","orcid":"https://orcid.org/0000-0003-0712-2038"},"institutions":[{"id":"https://openalex.org/I193662353","display_name":"Utrecht University","ror":"https://ror.org/04pp8hn57","country_code":"NL","type":"education","lineage":["https://openalex.org/I193662353"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Cristiana Santos","raw_affiliation_strings":["Utrecht University"],"affiliations":[{"raw_affiliation_string":"Utrecht University","institution_ids":["https://openalex.org/I193662353"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022695129","display_name":"Abhishek Bichhawat","orcid":"https://orcid.org/0000-0002-3075-2743"},"institutions":[{"id":"https://openalex.org/I27674431","display_name":"Indian Institute of Technology Gandhinagar","ror":"https://ror.org/0036p5w23","country_code":"IN","type":"education","lineage":["https://openalex.org/I27674431"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Abhishek Bichhawat","raw_affiliation_strings":["Indian Institute of Technology Gandhinagar"],"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Gandhinagar","institution_ids":["https://openalex.org/I27674431"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5028817422"],"corresponding_institution_ids":["https://openalex.org/I27674431"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.26227659,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2025","issue":"4","first_page":"329","last_page":"347"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9352999925613403,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9352999925613403,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9120000004768372,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/revocation","display_name":"Revocation","score":0.9363181591033936},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.737038791179657},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.46009936928749084},{"id":"https://openalex.org/keywords/informed-consent","display_name":"Informed consent","score":0.4553624987602234},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.35051560401916504},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3391764461994171},{"id":"https://openalex.org/keywords/medicine","display_name":"Medicine","score":0.33694398403167725},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3096567690372467},{"id":"https://openalex.org/keywords/social-psychology","display_name":"Social psychology","score":0.15661349892616272},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.06250980496406555},{"id":"https://openalex.org/keywords/alternative-medicine","display_name":"Alternative medicine","score":0.05214855074882507}],"concepts":[{"id":"https://openalex.org/C2775892892","wikidata":"https://www.wikidata.org/wiki/Q6509517","display_name":"Revocation","level":3,"score":0.9363181591033936},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.737038791179657},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.46009936928749084},{"id":"https://openalex.org/C68122502","wikidata":"https://www.wikidata.org/wiki/Q764527","display_name":"Informed consent","level":3,"score":0.4553624987602234},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.35051560401916504},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3391764461994171},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.33694398403167725},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3096567690372467},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.15661349892616272},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.06250980496406555},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.05214855074882507},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.56553/popets-2025-0133","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0133","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:HAL:hal-05474344v1","is_oa":true,"landing_page_url":"https://hal.science/hal-05474344","pdf_url":null,"source":{"id":"https://openalex.org/S4406922461","display_name":"SPIRE - Sciences Po Institutional REpository","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings on Privacy Enhancing Technologies, 2025, 2025 (4), pp.329-347. ⟨10.56553/popets-2025-0133⟩","raw_type":"Journal articles"}],"best_oa_location":{"id":"doi:10.56553/popets-2025-0133","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0133","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2600062742","https://openalex.org/W2321709401","https://openalex.org/W2004104370","https://openalex.org/W2898075319","https://openalex.org/W3144137556","https://openalex.org/W1974499258","https://openalex.org/W2185488310","https://openalex.org/W3148042169","https://openalex.org/W4392576316","https://openalex.org/W3187057705"],"abstract_inverted_index":{"The":[0],"EU":[1,153,236],"General":[2],"Data":[3],"Protection":[4],"Regulation":[5],"(GDPR)":[6],"requires":[7],"websites":[8,122,136,160,180,192],"to":[9,13,41,53,76,100,128,223,235,259],"facilitate":[10],"the":[11,54,66,80,85,94,111,164,182,224,241],"right":[12],"revoke":[14,77,129],"consent":[15,23,50,56,63,78,87,108,130,147,167,197,213,248],"from":[16],"Web":[17,112],"users.":[18],"Prior":[19],"works":[20],"have":[21,211],"examined":[22],"management":[24],"by":[25,104,230],"auditing":[26],"that":[27,119,193,204,210],"user":[28,95],"choices":[29],"are":[30,217],"correctly":[31],"stored,":[32],"and":[33,83,91,142,189,250,253],"comparing":[34],"cookies":[35,165],"set":[36],"upon":[37,214],"acceptance":[38],"versus":[39],"rejection":[40],"assess":[42],"compliance.":[43],"While":[44],"these":[45],"studies":[46],"measured":[47],"compliance":[48,106,246],"of":[49,107,121,135,173,220,227,247,256],"with":[51],"respect":[52],"various":[55],"requirements,":[57],"no":[58],"prior":[59],"work":[60,98],"has":[61],"studied":[62],"revocation":[64,109,148,168,257],"on":[65,79,110,113,205],"Web.":[67],"Therefore,":[68],"it":[69,74,124],"is":[70,75,88],"unclear":[71],"how":[72],"difficult":[73,125],"websites\u2019":[81],"interfaces,":[82,133],"whether":[84],"revoked":[86],"properly":[89],"stored":[90],"communicated":[92],"behind":[93],"interface.":[96],"Our":[97,238],"aims":[99],"fill":[101],"this":[102],"gap":[103],"measuring":[105],"Tranco\u2019s":[114],"top-200":[115],"websites.":[116],"We":[117],"found":[118,190,203],"19.87%":[120],"make":[123],"for":[126,156,243],"users":[127],"throughout":[131],"different":[132],"20.5%":[134],"require":[137],"more":[138],"effort":[139],"than":[140],"acceptance,":[141,216],"2.48%":[143],"do":[144,161],"not":[145,162,218],"provide":[146],"at":[149],"all,":[150],"thus":[151],"violating":[152],"legal":[154,245],"requirements":[155],"valid":[157],"consent.":[158],"57.5%":[159],"delete":[163],"after":[166],"enabling":[169],"continuous":[170],"illegal":[171,225],"processing":[172,226],"users\u2019":[174,228],"data.":[175],"Further,":[176],"we":[177,202],"analyzed":[178],"281":[179],"implementing":[181],"IAB":[183],"Europe":[184],"Transparency":[185],"&":[186],"Consent":[187],"Framework,":[188],"22":[191],"store":[194],"a":[195],"positive":[196],"despite":[198],"user\u2019s":[199,215],"revocation.":[200],"Surprisingly,":[201],"101":[206],"websites,":[207],"third":[208,232],"parties":[209,233],"received":[212],"informed":[219],"revocation,":[221,249],"leading":[222],"data":[229],"such":[231],"according":[234],"laws.":[237],"findings":[239],"emphasize":[240],"need":[242],"improved":[244],"proper,":[251],"consistent,":[252],"uniform":[254],"implementation":[255],"communication":[258],"third-parties.":[260]},"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}