Source-linked AI summary
Dark Patterns and the Legal Requirements of Consent Banners: An Interaction Criticism Perspective
Colin M. Gray, Cristiana Santos, Nataliia Bielova, Michael Toth, Damian Clifford
TL;DR
Consent-banner research has often treated design, legal compliance, ethics, and user experience separately, leaving limited transdisciplinary analysis of how these dimensions connect. This paper uses interaction criticism and dark-pattern language to examine consent-banner design through multiple perspectives, finding complex tensions among legal requirements, user experience, design choices, and social impact. It concludes by calling for dialogue across relevant disciplines to connect ethical concerns with public policy.
Problem
Existing consent-banner research often treats computational detection, user effects, and legal or ethical legitimacy separately, leaving their connections across the consent flow underdeveloped.
Method
The authors perform an interaction-criticism analysis of consent-banner design using HCI, design, privacy, data-protection, and legal perspectives.
Results
The analysis reveals complex and conflicting relationships among legal requirements, dark-pattern strategies, interface choices, user experience, designer intent, and social impact.
Takeaways & Limitations
The paper supports transdisciplinary dialogue to connect ethical concerns in consent-banner design with legal, policy, computer-science, and interactive-systems scholarship.
Takeaways & Limitations
Dark-pattern categories overlap and are difficult to distinguish, producing frequent disagreement among human evaluators about how a banner should be classified.
Abstract
from arXiv · showhide
User engagement with data privacy and security through consent banners has become a ubiquitous part of interacting with internet services. While previous work has addressed consent banners from either interaction design, legal, and ethics-focused perspectives, little research addresses the connections among multiple disciplinary approaches, including tensions and opportunities that transcend disciplinary boundaries. In this paper, we draw together perspectives and commentary from HCI, design, privacy and data protection, and legal research communities, using the language and strategies of "dark patterns" to perform an interaction criticism reading of three different types of consent banners. Our analysis builds upon designer, interface, user, and social context lenses to raise tensions and synergies that arise together in complex, contingent, and conflicting ways in the act of designing consent banners. We conclude with opportunities for transdisciplinary dialogue across legal, ethical, computer science, and interactive systems scholarship to translate matters of ethical concern into public policy.
1 INTRODUCTION
The paper connects HCI, design, privacy, data protection, and legal perspectives to examine consent banners as ethically and legally complex interactive systems. It uses interaction criticism and dark-pattern analysis to relate design choices, user experience, designer intent, and social impact.
- Prior work addresses technology ethics across HCI, STS, privacy, ethics, and law, but the paper emphasizes the need for transdisciplinary engagement.
- The paper examines consent banners because GDPR and the ePrivacy Directive require consent for tracking technologies, producing varied interaction techniques that can include dark patterns.
- Interaction criticism analyzes consent-banner design through the artifact, end-user experience, designer intent, and surrounding social milieu.
- The paper combines legal and ethics frameworks to evaluate how consent interfaces obstruct or manipulate user choice and to inform policy work and ethics education.
- It argues that dialogue across legal, ethical, computer science, and interactive-systems scholarship can translate ethical concerns into public policy.
2 RELATED WORK
Related work has studied consent-banner compliance, user behavior, dark patterns, and ethical concerns, but these approaches often remain separated. The paper positions its contribution as a transdisciplinary connection among design, legal, technical, and user-experience perspectives.
- Studies report that interface details influence consent decisions, including banner position, highlighted acceptance controls, and the availability of choices for different cookie uses.
- Less than 12% of analyzed websites complied with EU law, while hiding “Reject all” at least two clicks away increased consent by 22 percentage points.
- A highlighted “Select all” default significantly increased complete consent, with participants often reporting regret afterward.
- Prior consent-banner research has examined computational detection, user effects, and ethical or legal legitimacy, but often disconnects individual design choices from the overall consent flow.
- Ethics scholarship spans moral philosophy, professional ethics, practitioner complexity, and methods such as Value-Sensitive Design, while the paper seeks to connect these concerns with legal and design perspectives.
- Dark patterns include nagging, obstruction, sneaking, interface interference, and forced action, describing ways interfaces redirect, complicate, conceal, privilege, or require actions.
3 OUR APPROACH
The authors use a deliberately transdisciplinary, qualitative interaction-criticism approach to analyze consent-banner design choices drawn from prior recordings and website data. They organize analysis around the consent task flow and four interpretive perspectives rather than estimating pattern prevalence.
- Researcher Positionality: The research team combines computer science, HCI and design, and EU data-protection law expertise to examine contested disciplinary perspectives.
- Data Collection and Framing: The dataset contains 560 EU-accessible websites from French-, Italian-, or English-speaking countries whose banners implemented the IAB Europe Transparency and Consent Framework.
- Data Collection and Framing: The authors reviewed recordings from over 50 sites and identified four consent-task phases: initial framing, configuration options, acceptance, and revocation.
- Data Collection and Framing: They selected four combinations of design choices that raised ethical dilemmas, including consent types that prior empirical and user-study work had not precisely identified.
- Data Collection and Framing: The dataset served as inspiration rather than as a content-analysis sample, so the study represents varied consenting approaches instead of typicality or popularity.
- Data Analysis: Interaction criticism iteratively examines designer intent, interface qualities, user experience, and potential social impact through interdisciplinary argumentation and reflexivity.
4 FINDINGS
The findings examine four consent-flow design choices through legal, interface, user, designer, and social perspectives. They reveal recurring tensions between obtaining consent, preserving user autonomy, enabling access, and translating legal requirements into concrete interface rules.
- Consent Wall: Consent walls separate consent from website use, creating tension between required prior consent and the requirement that consent be freely given.The paper notes that blocking access may be legitimate in some contexts, but users may need to cancel the request and continue browsing without tracking.
- Other Configuration Barriers: Layered interfaces and visual or reading-order manipulation can emphasize acceptance, hide configuration choices, and discourage rejection.These tactics may increase positive consents while potentially undermining readable, accessible, specific, and informed choice.
- Consent Wall: Consent walls can function as forced action by placing desired content behind an obstructive barrier that requires users to make a choice before proceeding.This interaction exemplifies a dark-pattern strategy in which users must act to access functionality they intended to use.
- Tracking Wall: Tracking walls intensify consent-wall pressures by removing refusal and making acceptance the only route to website access.Users are left with a single choice: consent to the offered tracking terms or leave the site.
- Reduced Service: Reduced service exposes tensions among user rights, website funding, freely given and transparent consent, and expectations of cost-free access.The paper considers reduced service potentially acceptable only when consequences are explicit and the interaction is non-coercive, without sneaking or interface interference.
- Tracking Wall: Tracking walls create additional legal and social concerns because refusing consent prevents access and may make privacy protection incompatible with using a service.The paper connects this stronger restriction to concerns about freely given consent, coercion, and unequal access to online content.
5 DISCUSSION
The discussion identifies tensions between legal requirements, design choices, user experience, and dark-pattern classifications in consent banners. It argues that transdisciplinary analysis can inform policy while recognizing interpretive limits, persistent behavioral effects, and the burden placed on users.
- Discussion: Consent-banner analysis reveals synergies and disconnects among legal, design, HCI, ethics, and user perspectives.The authors use these tensions to identify opportunities for policy and design dialogue.
- Bi-directional Design and Legal Argumentation: Standardization could support valid user choice, detect violations at scale, and reduce legal uncertainty, but no fully neutral design requirement guarantees compliant consent.The authors connect standardization with automated detection and reduced subjectivity while preserving its limits.
- Opportunities to Bridge Legal, Ethics, and HCI Scholarship: Dark-pattern categories often overlap, making identification interpretive and requiring combined computational and manual methods.The authors note that some patterns can be computationally detected, whereas many user-experience features require human analysis.
- Bi-directional Design and Legal Argumentation: Tracking walls can be legally actionable, while reduced service may be unlawful yet fall outside explicit data-protection thresholds.This distinction motivates closer connections between design analysis and legal guidance.
- Discussion: Removing manipulative nudges may not eliminate routinized behavior, while privacy-friendly nudges can still produce unreflective defaults and perceived loss of control.The discussion describes this persistence as “effect survival” and questions the feasibility of pro-privacy nudges when companies are incentivized to track users.
- Discussion: Further progress may require empirical work to establish causality, broader participation to identify harmful practices, and professional criteria for recognizing irresponsible designs.The authors connect these pathways to policy, ethics codes, and practical responses beyond existing legal frameworks.
- Discussion: Interaction criticism generated new dark-pattern examples, including consent walls and reduced service, that are absent from pre-existing classifications.The examples emerged through discussion among legal experts, designers, and computer scientists.
- Discussion: The authors question whether consent should place such substantial decision-making responsibility on end-users under the GDPR.They characterize this pressure as potentially unwarranted and tied to consent's role as a legal basis for tracking-related processing.
6 IMPLICATIONS AND FUTURE WORK
The paper proposes future work connecting policymakers, HCI scholarship, and transdisciplinary design criticism. It emphasizes mapping ethical language and integrating legal argumentation into design education, research, and practice.
- Policy and HCI: Future research should connect policymakers and HCI scholarship to incorporate speculative and co-productive knowledge into policymaking.The authors propose examining how ethical concerns are expressed and how design concepts, design intent, and policy opportunities can be connected.
- Transdisciplinary Education and Research: Interaction criticism can support transdisciplinary examination of design artifacts, evidence, and argumentation across legal, ethics, and HCI perspectives.The authors link this approach to broader goals for design and HCI education and research.
- Legal Argumentation in Design: Integrating legal argumentation into design work is identified as a particularly important direction for guiding future practice and research.The paper frames this integration as a further area for investigation alongside education in transdisciplinary dialogue.
7 CONCLUSION
The paper analyzes consent banners through interaction criticism to combine HCI, design, privacy, data protection, and legal perspectives. It identifies cross-disciplinary synergies and barriers, highlighting implications for policy.
- The analysis reveals synergies and barriers among HCI, design, privacy, data protection, and legal perspectives on consent-banner design.
- Using dark-pattern language enables arguments across legal and design perspectives that expose limitations of policy.
- The paper identifies opportunities to combine HCI, design, and legal scholarship to translate ethical concerns into durable and effective public policy.