{"id":"https://openalex.org/W7162080526","doi":"https://doi.org/10.56553/popets-2026-0065","title":"Exercising the CCPA Opt-out Right on Android: Legally Mandated but Practically Challenging","display_name":"Exercising the CCPA Opt-out Right on Android: Legally Mandated but Practically Challenging","publication_year":2026,"publication_date":"2026-04-01","ids":{"openalex":"https://openalex.org/W7162080526","doi":"https://doi.org/10.56553/popets-2026-0065"},"language":null,"primary_location":{"id":"doi:10.56553/popets-2026-0065","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2026-0065","pdf_url":"https://petsymposium.org/popets/2026/popets-2026-0065.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://petsymposium.org/popets/2026/popets-2026-0065.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000743993","display_name":"Sebastian Zimmeck","orcid":"https://orcid.org/0000-0002-2500-2681"},"institutions":[{"id":"https://openalex.org/I100538780","display_name":"Wesleyan University","ror":"https://ror.org/05h7xva58","country_code":"US","type":"education","lineage":["https://openalex.org/I100538780"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sebastian Zimmeck","raw_affiliation_strings":["Wesleyan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wesleyan University","institution_ids":["https://openalex.org/I100538780"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136774088","display_name":"Nishant Aggarwal","orcid":null},"institutions":[{"id":"https://openalex.org/I100538780","display_name":"Wesleyan University","ror":"https://ror.org/05h7xva58","country_code":"US","type":"education","lineage":["https://openalex.org/I100538780"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nishant Aggarwal","raw_affiliation_strings":["Wesleyan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wesleyan University","institution_ids":["https://openalex.org/I100538780"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136794861","display_name":"Zachary Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I100538780","display_name":"Wesleyan University","ror":"https://ror.org/05h7xva58","country_code":"US","type":"education","lineage":["https://openalex.org/I100538780"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zachary Liu","raw_affiliation_strings":["Wesleyan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wesleyan University","institution_ids":["https://openalex.org/I100538780"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136808592","display_name":"Sage Altman","orcid":null},"institutions":[{"id":"https://openalex.org/I100538780","display_name":"Wesleyan University","ror":"https://ror.org/05h7xva58","country_code":"US","type":"education","lineage":["https://openalex.org/I100538780"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sage Altman","raw_affiliation_strings":["Wesleyan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wesleyan University","institution_ids":["https://openalex.org/I100538780"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5136761550","display_name":"Konrad Kollnig","orcid":null},"institutions":[{"id":"https://openalex.org/I34352273","display_name":"Maastricht University","ror":"https://ror.org/02jz4aj89","country_code":"NL","type":"education","lineage":["https://openalex.org/I34352273"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Konrad Kollnig","raw_affiliation_strings":["Maastricht University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Maastricht University","institution_ids":["https://openalex.org/I34352273"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.52892402,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2026","issue":"2","first_page":"662","last_page":"679"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.6725000143051147,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.6725000143051147,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.21320000290870667,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.018699999898672104,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ccpa","display_name":"CCPA","score":0.9194999933242798},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6438999772071838},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.44769999384880066},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.35100001096725464},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.32850000262260437},{"id":"https://openalex.org/keywords/patient-rights","display_name":"Patient rights","score":0.31869998574256897}],"concepts":[{"id":"https://openalex.org/C2781225136","wikidata":"https://www.wikidata.org/wiki/Q5009685","display_name":"CCPA","level":5,"score":0.9194999933242798},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6438999772071838},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.604200005531311},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.44769999384880066},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36390000581741333},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.35100001096725464},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3325999975204468},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.3312000036239624},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.32850000262260437},{"id":"https://openalex.org/C2992517282","wikidata":"https://www.wikidata.org/wiki/Q1976740","display_name":"Patient rights","level":3,"score":0.31869998574256897},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.27090001106262207},{"id":"https://openalex.org/C18414002","wikidata":"https://www.wikidata.org/wiki/Q8354932","display_name":"Right to privacy","level":2,"score":0.2606000006198883},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.2549000084400177},{"id":"https://openalex.org/C2779056723","wikidata":"https://www.wikidata.org/wiki/Q329717","display_name":"Warranty","level":2,"score":0.251800000667572},{"id":"https://openalex.org/C3017891749","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android application","level":3,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.56553/popets-2026-0065","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2026-0065","pdf_url":"https://petsymposium.org/popets/2026/popets-2026-0065.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.56553/popets-2026-0065","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2026-0065","pdf_url":"https://petsymposium.org/popets/2026/popets-2026-0065.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7533356547355652,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G3465016924","display_name":"SaTC: CORE: Small: Improving Internet Privacy with Global Privacy Control","funder_award_id":"2055196","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7162080526.pdf","grobid_xml":"https://content.openalex.org/works/W7162080526.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Many":[0],"mobile":[1],"apps'":[2,144,176],"business":[3],"model":[4],"is":[5,83,111,149],"based":[6],"on":[7,79,224,266],"sharing":[8],"user":[9],"data":[10],"with":[11,117,249],"ad":[12,190],"networks":[13],"to":[14,29,37,46,146,178,194,202],"deliver":[15],"personalized":[16],"ads.":[17],"The":[18],"California":[19,25,44,212],"Consumer":[20],"Privacy":[21,97],"Act":[22],"(CCPA)":[23],"gives":[24],"residents":[26,45,213],"a":[27,69,208],"right":[28,56,77,93,158,223,247],"opt":[30],"out.":[31],"In":[32,50,86],"two":[33],"experiments":[34],"we":[35,115],"evaluate":[36],"which":[38,72],"extent":[39],"popular":[40],"Android":[41,81,226,241],"apps":[42,67,108,123,135,182],"enable":[43],"exercise":[47],"their":[48,220],"right.":[49],"our":[51,87,125,166,205],"first":[52],"experiment\u2014manually":[53],"exercising":[54,90,154,219],"the":[55,80,91,130,147,155,179,185,189,225,230,234,240,253,267],"via":[57],"app-level":[58],"UIs\u2014we":[59],"find":[60,101],"that":[61,74,109,120,238],"only":[62,197],"48":[63],"out":[64],"of":[65,106,122,142,188,218],"100":[66],"implement":[68],"respective":[70],"setting,":[71],"suggests":[73],"CCPA":[75,131,156,221,254],"opt-out":[76,92,132,157,222,246],"compliance":[78,209],"platform":[82,268],"generally":[84],"low.":[85],"second":[88],"experiment\u2014automatically":[89],"by":[94],"sending":[95,171],"Global":[96],"Control":[98],"(GPC)":[99],"signals\u2014we":[100],"for":[102,153],"an":[103,245],"app":[104,126],"dataset":[105,127],"1,811":[107],"GPC":[110,172],"largely":[112],"ineffective.":[113],"While":[114],"estimate":[116],"95%":[118],"confidence":[119],"62%-81%":[121],"in":[124],"must":[128],"respect":[129],"right,":[133],"many":[134],"do":[136,138],"not":[137,151,164],"so.":[139],"Our":[140],"evaluation":[141],"disabling":[143,175],"access":[145,177],"AdID\u2014which":[148],"technically":[150],"intended":[152],"but":[159],"could":[160,258],"be":[161],"practically":[162],"effective\u2014does":[163],"change":[165],"conclusion.":[167],"For":[168],"example,":[169],"when":[170],"signals":[173],"and":[174,255,262],"AdID,":[180],"338":[181],"still":[183],"had":[184,199],"ccpa":[186],"status":[187],"network":[191],"Vungle":[192],"set":[193,200],"opted_in":[195],"while":[196],"26":[198],"it":[201],"opted_out.":[203],"Overall,":[204],"results":[206],"suggest":[207],"gap":[210,261],"as":[211,244],"have":[214],"no":[215],"effective":[216],"way":[217],"platform;":[227],"neither":[228],"at":[229,233],"app-":[231],"nor":[232],"platform-level.":[235],"We":[236],"think":[237],"re-purposing":[239],"AdID":[242],"setting":[243,248],"legal":[250],"meaning":[251],"under":[252],"other":[256],"laws":[257],"close":[259],"this":[260],"improve":[263],"users'":[264],"privacy":[265],"significantly.":[269]},"counts_by_year":[],"updated_date":"2026-08-23T07:36:19.812096","created_date":"2026-05-23T00:00:00"}