{"id":1061,"date":"2020-10-13T23:32:01","date_gmt":"2020-10-13T21:32:01","guid":{"rendered":"https:\/\/blog.zhaw.ch\/datascience\/?p=1061"},"modified":"2020-10-13T23:32:02","modified_gmt":"2020-10-13T21:32:02","slug":"the-psychology-of-cookie-banners-from-a-data-privacy-perspective","status":"publish","type":"post","link":"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/","title":{"rendered":"The Psychology of Cookie Banners from a Data Privacy Perspective"},"content":{"rendered":"\n

By Nico Ebert<\/a> (ZHAW)<\/em><\/p>\n\n\n\n

cross-posted from<\/em> the author’s blog<\/a><\/em><\/p>\n\n\n\n

Many Internet users inside and outside the European Union are very familiar with cookie banners: they pop up on websites, they are often annoying, and it is tedious to really deal with them. Having to state our data sharing and protection preferences over and over again is a questionable concept by itself. But even if we accept the concept of cookie banner as a matter of fact our behavior towards them seems paradox at a first glance.<\/p>\n\n\n\n\n\n\n\n

It has long been known that some of the tracking techniques used are very privacy invasive (e.g. session replay, fingerprinting), behavioral data is exchanged between different websites, advertising marketers and social media operators and extensive user profiles are created. At the same time, the benefits of cookies appear to be minimal. Why should we be willing to support companies with our data for \u201cusability\u201d, \u201cmarketing\u201d or \u201csocial media\u201d purposes if we seem to get nothing in return? And yet we \u201caccept all cookies\u201d all the time\u2026<\/p>\n\n\n\n

There is obviously a conflict of interest for those that ask for our consent in our browsers: companies need our behavioral data, so why should websites actively help us to prevent data collection? On our smartphones, this conflict is resolved by the fact that the operating system acts as a proxy for our interests against the app\u2019s other interests. Just imagine the \u201cvery convincing\u201d user interface dialogue in which a freemium game itself would ask you for the permission to download your address book and photos of your daughter.<\/p>\n\n\n\n

Having accepted this conflict of interest what is actually happening when we interact with a cookie banner? There are many theoretical ways to explain our behavior. While some theories assume rational behavior (e.g. weighting benefits vs. costs of accepting cookies), other don\u2019t (e.g. nudging us to accept cookies by default settings and hard to find opt-out option). One explanation offers the protection motivation theory (PMT) from Rogers (1975) which does not assume rationality. PMT\u2019s origin lies in disease and health prevention and it wants to facilitate a protection motivation (e.g. to quit smoking) by establishing a pervasive form of communication (e.g. creating fear with lung cancer photos on cigarette boxes, practical information on how to quit smoking).<\/p>\n\n\n\n

\"Image
Adapted Cognitive Mediating Process of the Protection Motivation Theory by Rogers (1983)<\/figcaption><\/figure>\n\n\n\n

The figure shows the cognitive mediating process of the revised PMT from 1983 adapted to the field of cookie consent decision. Theoretically, a positive appraisal of the threats posed by cookies and the fear of cookies as well as a positive appraisal of the handling of cookies would lead to an individual motivation to protect oneself from cookies and ultimately result in the rejection of cookies. In practice, cookie dialogues try to avoid any kind of threat perception and fear creation. Information that could be alarming for privacy sensitive users is often many clicks away: that the site uses fingerprinting, session replays and shares your data with Tiktok is hidden deep within the cookie policy in legal language. Instead, sometimes even euphemisms are used in communication that refer to the cookies your grandma baked. While threat and fear are avoided, rewards for accepting cookies are mentioned: \u201chelp to improve the website\u201d and \u201cpersonalized offers\u201d. The result is a negative thread appraisal.<\/p>\n\n\n\n

Most people would agree that it is quite difficult to deal with cookie dialogs in such a way that all non-technically required cookies are rejected. Several recent studies have shown that the costs to declining cookies are high compared to accepting cookies. Costs can be measured in time, clicks, saliency of options to name a few. The \u201cchoice architecture\u201d that describes how a cookie consent dialogues is designed is sometimes not in our favor. \u201cDark patterns\u201d make it easy to \u201caccept all\u201d and make it difficult to \u201cdecline all\u201d. The result is a negative coping appraisal.<\/p>\n\n\n\n

Ultimately, negative coping and threat appraisal do not lead to a motivation for behavior to protect one\u2019s privacy. As a result, also critical people click \u201caccept all\u201d.<\/p>\n\n\n\n

For sure, many people wouldn\u2019t perceive cookies as threats even if they would fully understand what data is collected and how it is used. Many people probably like personalized services and ads. Nobody is publicly known that has ever died of accepting cookies. However, maybe other people would decline cookies if they would be aware of threats and declining cookies was easier.<\/p>\n\n\n\n

References<\/h3>\n\n\n\n

Floyd, D. L., Prentice\u2010Dunn, S., & Rogers, R. W. (2000). A meta\u2010analysis of research on protection motivation theory. Journal of applied social psychology<\/em>, 30<\/em>(2), 407\u2013429.<\/p>\n\n\n\n

Ruiter, R. A., Kessels, L. T., Peters, G. J. Y., & Kok, G. (2014). Sixty years of fear appeal research: Current state of the evidence. International journal of psychology<\/em>, 49<\/em>(2), 63\u201370.<\/p>\n

Schlagw\u00f6rter: cookies<\/a>, Research<\/a>, Security & Privacy<\/a>, web tracking<\/a>
<\/div>","protected":false},"excerpt":{"rendered":"

By Nico Ebert (ZHAW) cross-posted from the author’s blog Many Internet users inside and outside the European Union are very familiar with cookie banners: they pop up on websites, they are often annoying, and it is tedious to really deal with them. Having to state our data sharing and protection preferences over and over again […]<\/p>\n","protected":false},"author":265,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[7,66,9],"tags":[85,70,24,84],"features":[],"class_list":["post-1061","post","type-post","status-publish","format-standard","hentry","category-blog","category-privacy","category-research","tag-cookies","tag-research","tag-security-privacy","tag-web-tracking"],"yoast_head":"\nThe Psychology of Cookie Banners from a Data Privacy Perspective - Data Science made in Switzerland<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Psychology of Cookie Banners from a Data Privacy Perspective\" \/>\n<meta property=\"og:description\" content=\"By Nico Ebert (ZHAW) cross-posted from the author’s blog Many Internet users inside and outside the European Union are very familiar with cookie banners: they pop up on websites, they are often annoying, and it is tedious to really deal with them. Having to state our data sharing and protection preferences over and over again […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/\" \/>\n<meta property=\"og:site_name\" content=\"Data Science made in Switzerland\" \/>\n<meta property=\"article:published_time\" content=\"2020-10-13T21:32:01+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-10-13T21:32:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/miro.medium.com\/max\/605\/1*qV6Zw78Px0Hracgvk3PNqA.png\" \/>\n<meta name=\"author\" content=\"mild\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"mild\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/\"},\"author\":{\"name\":\"mild\",\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/#\/schema\/person\/64f2a57e0efd0aa4c73f45df76618116\"},\"headline\":\"The Psychology of Cookie Banners from a Data Privacy Perspective\",\"datePublished\":\"2020-10-13T21:32:01+00:00\",\"dateModified\":\"2020-10-13T21:32:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/\"},\"wordCount\":807,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/miro.medium.com\/max\/605\/1*qV6Zw78Px0Hracgvk3PNqA.png\",\"keywords\":[\"cookies\",\"Research\",\"Security & Privacy\",\"web tracking\"],\"articleSection\":[\"Blog\",\"Privacy\",\"Research\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/\",\"url\":\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/\",\"name\":\"The Psychology of Cookie Banners from a Data Privacy Perspective - Data Science made in Switzerland\",\"isPartOf\":{\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/miro.medium.com\/max\/605\/1*qV6Zw78Px0Hracgvk3PNqA.png\",\"datePublished\":\"2020-10-13T21:32:01+00:00\",\"dateModified\":\"2020-10-13T21:32:02+00:00\",\"author\":{\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/#\/schema\/person\/64f2a57e0efd0aa4c73f45df76618116\"},\"breadcrumb\":{\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#primaryimage\",\"url\":\"https:\/\/miro.medium.com\/max\/605\/1*qV6Zw78Px0Hracgvk3PNqA.png\",\"contentUrl\":\"https:\/\/miro.medium.com\/max\/605\/1*qV6Zw78Px0Hracgvk3PNqA.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\/\/blog.zhaw.ch\/datascience\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Psychology of Cookie Banners from a Data Privacy Perspective\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/#website\",\"url\":\"https:\/\/blog.zhaw.ch\/datascience\/\",\"name\":\"Data Science made in Switzerland\",\"description\":\"Ein Blog der ZHAW Z\u00fcrcher Hochschule f\u00fcr Angewandte Wissenschaften\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.zhaw.ch\/datascience\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.zhaw.ch\/datascience\/#\/schema\/person\/64f2a57e0efd0aa4c73f45df76618116\",\"name\":\"mild\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/3c38b532abe81ed471e1e6559571ef62f075b055ca6520f8c29ee603a233e272?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/3c38b532abe81ed471e1e6559571ef62f075b055ca6520f8c29ee603a233e272?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/3c38b532abe81ed471e1e6559571ef62f075b055ca6520f8c29ee603a233e272?s=96&d=mm&r=g\",\"caption\":\"mild\"},\"url\":\"https:\/\/blog.zhaw.ch\/datascience\/author\/mild\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"The Psychology of Cookie Banners from a Data Privacy Perspective - Data Science made in Switzerland","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/","og_locale":"en_US","og_type":"article","og_title":"The Psychology of Cookie Banners from a Data Privacy Perspective","og_description":"By Nico Ebert (ZHAW) cross-posted from the author’s blog Many Internet users inside and outside the European Union are very familiar with cookie banners: they pop up on websites, they are often annoying, and it is tedious to really deal with them. Having to state our data sharing and protection preferences over and over again […]","og_url":"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/","og_site_name":"Data Science made in Switzerland","article_published_time":"2020-10-13T21:32:01+00:00","article_modified_time":"2020-10-13T21:32:02+00:00","og_image":[{"url":"https:\/\/miro.medium.com\/max\/605\/1*qV6Zw78Px0Hracgvk3PNqA.png","type":"","width":"","height":""}],"author":"mild","twitter_card":"summary_large_image","twitter_misc":{"Written by":"mild","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#article","isPartOf":{"@id":"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/"},"author":{"name":"mild","@id":"https:\/\/blog.zhaw.ch\/datascience\/#\/schema\/person\/64f2a57e0efd0aa4c73f45df76618116"},"headline":"The Psychology of Cookie Banners from a Data Privacy Perspective","datePublished":"2020-10-13T21:32:01+00:00","dateModified":"2020-10-13T21:32:02+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/"},"wordCount":807,"commentCount":0,"image":{"@id":"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#primaryimage"},"thumbnailUrl":"https:\/\/miro.medium.com\/max\/605\/1*qV6Zw78Px0Hracgvk3PNqA.png","keywords":["cookies","Research","Security & Privacy","web tracking"],"articleSection":["Blog","Privacy","Research"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/","url":"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/","name":"The Psychology of Cookie Banners from a Data Privacy Perspective - Data Science made in Switzerland","isPartOf":{"@id":"https:\/\/blog.zhaw.ch\/datascience\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#primaryimage"},"image":{"@id":"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#primaryimage"},"thumbnailUrl":"https:\/\/miro.medium.com\/max\/605\/1*qV6Zw78Px0Hracgvk3PNqA.png","datePublished":"2020-10-13T21:32:01+00:00","dateModified":"2020-10-13T21:32:02+00:00","author":{"@id":"https:\/\/blog.zhaw.ch\/datascience\/#\/schema\/person\/64f2a57e0efd0aa4c73f45df76618116"},"breadcrumb":{"@id":"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#primaryimage","url":"https:\/\/miro.medium.com\/max\/605\/1*qV6Zw78Px0Hracgvk3PNqA.png","contentUrl":"https:\/\/miro.medium.com\/max\/605\/1*qV6Zw78Px0Hracgvk3PNqA.png"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.zhaw.ch\/datascience\/the-psychology-of-cookie-banners-from-a-data-privacy-perspective\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/blog.zhaw.ch\/datascience\/"},{"@type":"ListItem","position":2,"name":"The Psychology of Cookie Banners from a Data Privacy Perspective"}]},{"@type":"WebSite","@id":"https:\/\/blog.zhaw.ch\/datascience\/#website","url":"https:\/\/blog.zhaw.ch\/datascience\/","name":"Data Science made in Switzerland","description":"Ein Blog der ZHAW Z\u00fcrcher Hochschule f\u00fcr Angewandte Wissenschaften","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.zhaw.ch\/datascience\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.zhaw.ch\/datascience\/#\/schema\/person\/64f2a57e0efd0aa4c73f45df76618116","name":"mild","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/3c38b532abe81ed471e1e6559571ef62f075b055ca6520f8c29ee603a233e272?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/3c38b532abe81ed471e1e6559571ef62f075b055ca6520f8c29ee603a233e272?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3c38b532abe81ed471e1e6559571ef62f075b055ca6520f8c29ee603a233e272?s=96&d=mm&r=g","caption":"mild"},"url":"https:\/\/blog.zhaw.ch\/datascience\/author\/mild\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.zhaw.ch\/datascience\/wp-json\/wp\/v2\/posts\/1061","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.zhaw.ch\/datascience\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.zhaw.ch\/datascience\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.zhaw.ch\/datascience\/wp-json\/wp\/v2\/users\/265"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.zhaw.ch\/datascience\/wp-json\/wp\/v2\/comments?post=1061"}],"version-history":[{"count":1,"href":"https:\/\/blog.zhaw.ch\/datascience\/wp-json\/wp\/v2\/posts\/1061\/revisions"}],"predecessor-version":[{"id":1062,"href":"https:\/\/blog.zhaw.ch\/datascience\/wp-json\/wp\/v2\/posts\/1061\/revisions\/1062"}],"wp:attachment":[{"href":"https:\/\/blog.zhaw.ch\/datascience\/wp-json\/wp\/v2\/media?parent=1061"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.zhaw.ch\/datascience\/wp-json\/wp\/v2\/categories?post=1061"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.zhaw.ch\/datascience\/wp-json\/wp\/v2\/tags?post=1061"},{"taxonomy":"features","embeddable":true,"href":"https:\/\/blog.zhaw.ch\/datascience\/wp-json\/wp\/v2\/features?post=1061"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}