{"id":62565,"date":"2019-10-22T00:00:00","date_gmt":"2019-10-22T00:00:00","guid":{"rendered":"http:\/\/blog.mozilla.org\/foxtail\/2019\/10\/22\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/"},"modified":"2021-02-03T02:46:37","modified_gmt":"2021-02-03T02:46:37","slug":"the-illusion-of-choice-and-the-need-for-default-privacy-protection","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/","title":{"rendered":"The Illusion of choice and the need for default privacy protection"},"content":{"rendered":"

Since July 2019, Firefox\u2019s Enhanced Tracking Protection has blocked over 450 Billion third-party tracking requests <\/b>from exploiting user data for profit. This shocking number reveals the sheer scale of online tracking and it highlights why the current advertising industry push on transparency, choice and \u201cconsent\u201d as a solution to online privacy simply won\u2019t work. The solutions put forth by other tech companies and the ad industry provide the illusion of choice. Let\u2019s step through the reasons why that is and why we ultimately felt it necessary to enable Enhanced Tracking Protection by default.<\/p>\n

A few months ago, we began to enable Enhanced Tracking Protection, which protects Firefox users from cookie-based tracking by default. We did this for a few reasons:<\/p>\n

1. People do not expect their data to be sent to, and collected by, third-party companies<\/b> as they browse the web. For example, 72% of people do not expect<\/a> that Facebook uses \u201cLike\u201d buttons to collect data about a person\u2019s online activity on websites outside of Facebook (when the buttons are not actually clicked). Many in the ad industry will point to conversion rates for behaviorally targeted ads as evidence for consumers being okay with the privacy tradeoff, but people don\u2019t know they are actually making such a tradeoff. And even if they were aware, we shouldn\u2019t expect<\/a> them to have the information necessary to evaluate the tradeoff. When people are asked explicitly about it, they are generally opposed. 68% of people believe<\/a> that using online tracking to tailor advertisements is unethical.<\/p>\n

2. The scale of the problem is immense<\/b>. We currently see about 175 tracking domains being blocked per Firefox client per day. This has very quickly resulted in over 450B trackers being blocked in total since July. You can see the numbers accelerate in the beginning of September after we enabled Enhanced Tracking Protection for all users.<\/p>\n

\"\"
Estimate of Tracking Requests Blocked by Firefox with Enhanced Tracking Protection<\/figcaption><\/figure>\n

It should be clear from these numbers that users would be quickly overwhelmed if they were required to make individual choices about data sharing to this many companies.<\/p>\n

3. The industry uses dark patterns to push people to \u201cconsent\u201d<\/b> via cookie\/consent banners.<\/p>\n

We\u2019ve all had to click through consent banners every time we visit a new site. Let\u2019s walk through the dark patterns in one large tech company\u2019s consent management flow as an example, keeping in mind that this experience is not unique — you can find plenty of other examples just like this one. This particular consent management flow shows how these interfaces are often designed counterintuitively so that users likely don\u2019t think they are agreeing to be tracked. We\u2019ve redacted the company name in the example to focus on the content of the experience.<\/p>\n

To start off, we’re presented with a fairly standard consent prompt, which is meant to allow the site visitor to make an informed choice about how their data can be collected and used. However note that clicking anywhere on the page<\/b> provides \u201cconsent\u201d. It only gets worse from here…<\/p>\n

\"\"
Consent prompt on large tech company website<\/figcaption><\/figure>\n

If the user manages to click \u201cManage Ad Cookies\u201d before clicking elsewhere on the page, they are given the options to “Save Settings” or “Allow All”. According to the highlighted text, clicking either of these buttons at this point provides consent to all partners to collect user data.\u00a0 Users are not given the option to “Disable All”.<\/p>\n

\"\"
Confusing consent dialog<\/figcaption><\/figure>\n

Instead, if a user wants to manage<\/b> consent they have to click the link labeled view<\/b> vendor consent. Wording matters here! If a person is skimming through that dialog they’ll assume that link is informational. This consent flow is constructed to make the cognitive load required to protect oneself as high as possible, while providing ample opportunity to “take the easy way out”<\/i> and allow all tracking.<\/p>\n

Finally, users who make it to the consent management section of the flow are presented with 415<\/b> individual sliders. The website provides a global toggle, but let’s assume a user actually wants to make informed choices about each partner. After all, that is the point, right?<\/p>\n

\"\"
Confusing consent mechanism<\/figcaption><\/figure>\n

Eight of the 415 privacy policies linked from the consent management page are inaccessible. They throw certificate errors, fail to resolve, or time out.<\/p>\n

\"\"
Error loading privacy policies for 3rd party partners<\/figcaption><\/figure>\n

The 407 privacy policies that load correctly total over 1.3 million words. That will take the average adult over 86 hours — two solid work weeks — just to read. That doesn\u2019t even consider the time needed to reflect on that information and make an informed choice.<\/p>\n

Proposals for “transparency and consent” as a solution to rampant web tracking should be seen for what they really are: proposals to continue business as usual.<\/p>\n

Thankfully Firefox blocks almost all of the third-party cookies loaded on the page by default, despite the deceptive methods used to get the visitor to \u201cconsent\u201d.<\/p>\n

\"\"
Tracking Cookies Blocked in Firefox by Default<\/figcaption><\/figure>\n

While it is easy to focus on this particular example, this experience is far from unique. The sheer volume of tracker blocking that we see with Firefox\u2019s Enhanced Tracking Protection (around 175 blocks per client per day) confirms that the average individual would never be able to make informed choices about whether or not individual companies can collect their data. This also highlights how tech companies need to do more if they are really serious about privacy, rather than push the burden onto their customers.<\/p>\n

Firefox already blocks tracking by default. Today, a new version of Firefox will be released which will make it clear when tracking attempts are happening without your knowledge and it will highlight how Firefox is keeping you safe.<\/p>\n

We invite you to try and download the Firefox browser here<\/a>.<\/p>\n

\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"

Since July 2019, Firefox\u2019s Enhanced Tracking Protection has blocked over 450 Billion third-party tracking requests from exploiting user data for profit. This shocking number reveals the sheer scale of online tracking and it highlights why the current advertising industry push on transparency, choice and \u201cconsent\u201d as a solution to online privacy simply won\u2019t work. The […]<\/p>\n","protected":false},"author":610,"featured_media":12207,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30],"tags":[],"coauthors":[],"acf":[],"yoast_head":"\nThe Illusion of choice and the need for default privacy protection<\/title>\n<meta name=\"description\" content=\"Since July 2019, Firefox\u2019s Enhanced Tracking Protection has blocked over 450 Billion third-party tracking requests from exploiting user data for profit. Let\u2019s step through the reasons why that is and why we ultimately felt it necessary to enable Enhanced Tracking Protection by default.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/\",\"url\":\"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/\",\"name\":\"The Illusion of choice and the need for default privacy protection\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2019\/06\/FX_Blog_ETP_PDol_1200x660.jpg\",\"datePublished\":\"2019-10-22T00:00:00+00:00\",\"dateModified\":\"2021-02-03T02:46:37+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/dd77cb456eceabaeedbe81d15e119a85\"},\"description\":\"Since July 2019, Firefox\u2019s Enhanced Tracking Protection has blocked over 450 Billion third-party tracking requests from exploiting user data for profit. Let\u2019s step through the reasons why that is and why we ultimately felt it necessary to enable Enhanced Tracking Protection by default.\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/#primaryimage\",\"url\":\"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2019\/06\/FX_Blog_ETP_PDol_1200x660.jpg\",\"contentUrl\":\"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2019\/06\/FX_Blog_ETP_PDol_1200x660.jpg\",\"width\":1200,\"height\":660,\"caption\":\"Consent prompt on large tech company website\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Illusion of choice and the need for default privacy protection\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/en\/\",\"name\":\"The Mozilla Blog\",\"description\":\"News and Updates about Mozilla\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/en\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/dd77cb456eceabaeedbe81d15e119a85\",\"name\":\"Peter Dolanjski\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/image\/e5cbd0410e24d27965d4c4912763df5d\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4008a18f73677c23e42b2dde0ea6e73d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4008a18f73677c23e42b2dde0ea6e73d?s=96&d=mm&r=g\",\"caption\":\"Peter Dolanjski\"},\"description\":\"Peter is a Product Manager for Firefox and a defender of the open Web.\",\"url\":\"https:\/\/blog.mozilla.org\/en\/author\/pdolanjskimozilla-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Illusion of choice and the need for default privacy protection","description":"Since July 2019, Firefox\u2019s Enhanced Tracking Protection has blocked over 450 Billion third-party tracking requests from exploiting user data for profit. Let\u2019s step through the reasons why that is and why we ultimately felt it necessary to enable Enhanced Tracking Protection by default.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/","url":"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/","name":"The Illusion of choice and the need for default privacy protection","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/#primaryimage"},"image":{"@id":"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2019\/06\/FX_Blog_ETP_PDol_1200x660.jpg","datePublished":"2019-10-22T00:00:00+00:00","dateModified":"2021-02-03T02:46:37+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/dd77cb456eceabaeedbe81d15e119a85"},"description":"Since July 2019, Firefox\u2019s Enhanced Tracking Protection has blocked over 450 Billion third-party tracking requests from exploiting user data for profit. Let\u2019s step through the reasons why that is and why we ultimately felt it necessary to enable Enhanced Tracking Protection by default.","breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/#primaryimage","url":"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2019\/06\/FX_Blog_ETP_PDol_1200x660.jpg","contentUrl":"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2019\/06\/FX_Blog_ETP_PDol_1200x660.jpg","width":1200,"height":660,"caption":"Consent prompt on large tech company website"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/en\/firefox\/the-illusion-of-choice-and-the-need-for-default-privacy-protection\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/en\/"},{"@type":"ListItem","position":2,"name":"The Illusion of choice and the need for default privacy protection"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/en\/#website","url":"https:\/\/blog.mozilla.org\/en\/","name":"The Mozilla Blog","description":"News and Updates about Mozilla","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/en\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/dd77cb456eceabaeedbe81d15e119a85","name":"Peter Dolanjski","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/image\/e5cbd0410e24d27965d4c4912763df5d","url":"https:\/\/secure.gravatar.com\/avatar\/4008a18f73677c23e42b2dde0ea6e73d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4008a18f73677c23e42b2dde0ea6e73d?s=96&d=mm&r=g","caption":"Peter Dolanjski"},"description":"Peter is a Product Manager for Firefox and a defender of the open Web.","url":"https:\/\/blog.mozilla.org\/en\/author\/pdolanjskimozilla-com\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/posts\/62565"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/users\/610"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/comments?post=62565"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/posts\/62565\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/media\/12207"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/media?parent=62565"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/categories?post=62565"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/tags?post=62565"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/coauthors?post=62565"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}