Consent Receipts for a Usable and Auditable Web of Personal Data

Consenting on the Web, in context of online privacy and data protection, is universally accepted as a difficult problem, mainly because its cross-disciplinarity. For example, any approach to needs meet usability, legal, regulatory, technical, business requirements. To date, effort has been predominantly focused meeting compliance with regulations automation, less true re-empowerment users respect their personal data. One that not seen sufficient research use ‘ Consent Receipts ’, which offer new paradigm recording interactions concerning consent using them proofs future actions, similar familiar common shopping receipt. In addition being record, receipts encourage accountability how technology handles beneficial for all involved stakeholders. organisations, it assists legal requirements demonstration valid consent, while provides transparency by proof be used against malpractices related consent. Receipts also have uses those such authorising holder exercising rights. This paper analyses requirements, uses, benefits offered an extensive broad literature review. Since are novel concept, we identify properties then mechanisms necessary Web support receipts. We demonstrate feasibility through proof-of-concepts three real-world use-cases: (a) acceptance policy subsequent changes; (b) choices expressed via dialogues or cookie banners; (c) verbal Amazon Alexa.