Want to opt out of the sale, sharing or use of your data? good luck

Read the fine print. Even this may not help. A new report has found that some of the world’s largest online platforms, including Google, Meta, Amazon and TikTok, are making it very difficult for people to opt out of the collection and use of their data.

In her report, Good luck unsubscribing – manipulative design patterns in unsubscribes,Digital Privacy and Advocacy Group Electronic Privacy Information Center Examined the opt-out procedures for 38 major companies that collect customer data.

The investigation found that many of these companies use “dark patterns” in their opt-out processes. This term refers to intentionally tricking, directing, or pressuring consumers into allowing their data to be collected, shared, and sold through deceptive or confusing methods on company websites and apps.

Many companies deprive their customers of real choice over the use of their personal data, says EPIC consultant Carolyn Kraczun He said in a statement. “For individuals who face increased risks, including stalking, doxxing, or targeted harassment, these barriers can have serious real-world safety consequences,” Kraczon said.

When CNET asked for comment, a Meta spokesperson pointed to the company’s general privacy terms. “As we say openly in our region privacy policyWe do not sell any of your information to anyone and never will.” However, this policy states that Meta shares customer information with other companies and that “certain information is required for our products to work. Other information is optional, but without it the quality of your experience may suffer.”

Representatives for Google and OpenAI, mentioned in the EPIC report, did not immediately respond to requests for comment.

Read more: A Guide to Data Removal Services: Should You Pay for Privacy?

The report pointed to the real-world consequences of personal information becoming widely available online due to the buying, selling and sharing of data by intermediaries and other companies. Vance Bulleter, the man Accused of murder Last year, Minnesota Rep. Melissa Hortman and her husband, Mark, used “people search” data brokers to find out where they lived.

“For decades, abusive individuals have also used technologies and data to locate, stalk, harass, intimidate, assault, and even kill other people, predominantly affecting women, women of color, and LGBT people,” the report said.

There are 20 states — including California, Texas, and Florida — which have laws requiring companies to let customers opt out of data collection. Use, share and sell.

But the EPIC study found that deceptive opt-outs hinder this legislation. Researchers identified eight patterns companies use to make it difficult to unsubscribe, such as not including an unsubscribe link on the home page, asking customers to fill out multiple forms, using confusing and/or misleading language, and requiring customers to log in or pay for a subscription before canceling.

The report found that Meta, Google, TikTok, OpenAI, Whitepages, and Tinder — among 15 companies — “did not explicitly link their opt-out form from the home page.” TransUnion, one of the “Big Three” credit bureaus, forces customers to submit several opt-out forms, as do people-search sites Whitepages and Spokeo.

EPIC also found that white pages — It is used by more than 30 million people every month — Requires people to point to profile URLs that contain their information. Fair enough, but you may need to pay for a Whitepages subscription to see those reports. EPIC also said that Whitepages hides some pages behind a paywall.

Spokeo describes itself as “an industry leader in respecting consumers’ privacy preferences.” but, Its unsubscribe page It also states that “your information may reappear on Spokeo in the future without notice” and that people should keep checking the site if new listings appear.

Harrison Tang, Spokeo’s chief operating officer and co-founder, told CNET that although his site aggregates publicly available information from various sources, consumers should “take control of their data.”

Spokeo “makes every effort to remember each consumer’s privacy preferences, so that if Spokeo receives generic consumer information in the future, it will not automatically resurface or be available for sale,” Tang said.

The investigation found that some companies have the “opt-in” checkbox selected by default on their opt-out pages, including ride-hailing companies Uber and Lyft and dating apps Grindr and Bumble, so “consumers must click a toggle or check box to opt-out.”

EPIC’s Krakzon told CNET that there are tools consumers can use now to prevent companies from using their data. One of these is called Global Privacy Monitor – Do Not Sell or Share Request – which “sends an opt-out signal to every site you visit while browsing the web.” Twelve states require businesses to honor universal opt-out signals, Krakzon said.

People in California can “file a deletion request” with the new state, Kraczun said Delete the ordering platform and unsubscribe“Which allows Californians to send a single signal to all data brokers operating in the state to delete their information and stop selling it.”

Justin Sherman, resident researcher at EPIC and author of the report, said companies undermine privacy rights and public trust with deceptive opt-outs.

“Manipulative design has no place in privacy compliance,” Sherman said in a statement. “Businesses must remove these barriers, and regulators must step up enforcement to ensure consumers can meaningfully control how their personal data is collected, sold, and shared.”