Skip to content

Home > Resources > papers > BRD+24-SoK-Privacy-Regulations

SoK: Technical Implementation and Human Impact of Internet Privacy Regulations (Birrell et al. 2024)

Last modified: 2026-10-27
DOI: 10.1109/sp54263.2024.00206 ยท URL: https://arxiv.org/abs/2312.15383

Summary

Systematizes research on how internet privacy regulations (GDPR, CCPA and others) are technically implemented and how they affect people in practice, e.g. consent banners, data-subject access requests and opt-outs. Finds frequent gaps between legal intent, deployed mechanisms and user outcomes. Relevant to e-ID because legal requirements such as data minimisation and unlinkability (eIDAS 2.0, Swiss e-ID law) are what motivate ZKP-based credentials. Published at IEEE S&P 2024.