Before and after GDPR

Tracking in mobile apps

Bibliographic Data

ID22022497
AuthorsKonrad Kollnig (0000-0002-7412-8731, University of Oxford), Reuben Binns (0000-0001-8717-6559, University of Oxford), Max Van Kleek (0000-0003-3873-6366, University of Oxford), Ulrik Lyngs (0000-0001-9960-1436), Jun Zhao (0000-0001-5132-8012, University of Oxford), Claudine Tinsman (0000-0002-2605-3309, University of Oxford), Nigel Shadbolt (0000-0002-5085-9724, University of Oxford)
Year2021
Volume10
Issue4
Publication date2021-12-21
Open AccessYes
TypeARTICLE
VenueInternet Policy Review (JOURNAL)
Journal identifiersISSN: 2197-6775 • E-ISSN: 2197-6775
PublisherInternet Policy Review, Alexander von Humboldt Institute for Internet and Society (PUBLISHER)
DOI10.14763/2021.4.1611
OpenAlexW4200251246
LanguageEN
Citations received3
References cited16

Third-party tracking, the collection and sharing of behavioural data about individuals, is a significant and ubiquitous privacy threat in mobile apps. The EU General Data Protection Regulation (GDPR) was introduced in 2018 to protect personal data better, but there exists, thus far, limited empirical evidence about its efficacy. This paper studies tracking in nearly two million Android apps from before and after the introduction of the GDPR. Our analysis suggests that there has been limited change in the presence of third-party tracking in apps, and that the concentration of tracking capabilities among a few large gatekeeper companies persists. However, change might be imminent

Activity tracker · Business · Computer security · Data collection · Data Protection Act 1998 · General Data Protection Regulation · Internet privacy · Mobile apps · Privacy Protection · World Wide Web · Advanced Malware Detection Techniques · Computer Science · Privacy, Security, and Data Protection · Psychology · User Authentication and Security Systems

Tools

Open DOIOpen Access