I Agree: Customize your Personal Data Processing with the CoRe User Interface

Olha Drozd, Sabrina Kirrane

Publication: Chapter in book/Conference proceedingContribution to conference proceedings

17 Downloads (Pure)


The General Data Protection Regulation (GDPR) requires, except for some predefined scenarios (e.g., contract performance, legal obligations, vital interests, etc.), obtaining consent from the data subjects for the processing of their personal data. Companies that want to process personal data of the European Union (EU) citizens but are located outside the EU also have to comply with the GDPR. Existing mechanisms for obtaining consent involve presenting the data subject with a document where all possible data processing, done by the entire service, is described in very general terms. Such consent is neither specific nor informed. In order to address this challenge, we introduce a consent request (CoRe) user interface (UI) with maximum control over the data processing and a simplified CoRe UI with reduced control options. Our CoRe UI not only gives users more control over the processing of their personal data but also, according to the usability evaluations reported in the paper, improves their comprehension of consent requests.
Original languageEnglish
Title of host publicationProceedings of the 16th International Conference on Trust, Privacy and Security in Digital Business (TrustBus 2019)
Editors na
Place of PublicationAustria
Publication statusPublished - 2019

Austrian Classification of Fields of Science and Technology (ÖFOS)

  • 102
  • 102015 Information systems
  • 502050 Business informatics
  • 505002 Data protection

Cite this