Abstract:Information notice and data subject's consent are the current main legal safeguards of data protection and privacy rights: they reflect individuals' instances, such as self-determination and control over one's own private sphere, that have been acknowledged in many jurisdictions. However, the theoretic strength of these safeguards appears frustrated by current online practices that seem suggesting to give-up with their most common form of implementation: privacy notices and request for consent. These measures are proving to be unsuccessful in increasing users' awareness and in fostering a privacy protective-behaviour. As recent studies have shown, although people declare privacy concerns, their actual behaviour diverges from their statements (the "privacy paradox"), as they seem to increasingly disclose personal data and to not even read privacy notices available online; eventually, the current privacy notices are not effective in regulating user's data disclosure. Behaviourally informed approaches to regulatory problems, already applied to different areas of information provision and public policy, helped to clarify the reasons of similar peoples' behaviour that cannot be reduced to a simplistic "users do not care about privacy." Highlighting the regulatory weakness of traditional information notices, applied behavioural science has also demonstrated to be particularly effective in improving users' decision-making and attaining concrete policy objectives if accompanied by ad hoc design interventions to display the relevant, salient information. As users do not read privacy policies or act in contradiction with them, other strategies might be more successful in promoting, "nudging," privacy-protective behaviour. The use of innovative information notices, like salient alerts and nudges, seems to be a promising means of behavioural change also in the area of digital privacy, a possible new area of application of behavioural insights. Building on recent studies in the field ( conducted mainly in the U.S.), this paper considers new forms of privacy notices (like "visceral" 2 Syracuse Journal of International Law and Commerce, Vol. 43, No. 1 [2015], Art. 4 https://surface.syr.edu/jilc/vol43/iss1/4 2015] Addressing the 'Failure' of Informed Consent 71 notices), as alternative or complement to current legal (technical) measures for data protection. For the informed consent approach (or "notice and choice" approach) to work, it needs to be improved with welldesigned, transparent and regulated nudging system, capable to help citizens in their decision-making as regards their privacy. Without disregarding the challenges and limitations of nudging strategies in public policy in general and in the privacy area in particular, and examining their legal grounds, the paper aims also to integrate that branch of legal-policy research that see "nudging" methods as an effective way to gently encourage safer behaviours in the citizens.

The Way the Cookie Crumbles: Online Tracking Meets Behavioral Economics

Economic Consequences of Online Tracking Restrictions: Evidence from Cookies

4 Years of EU Cookie Law: Results and Lessons Learned

Uncovering the Flop of the EU Cookie Law

Crumbled Cookies: Exploring E-commerce Websites? Cookie Policies with Data Protection Regulations

The Impact of User Location on Cookie Notices (Inside and Outside of the European Union)

The Unwanted Sharing Economy: An Analysis of Cookie Syncing and User Transparency under GDPR

User Tracking in the Post-cookie Era: How Websites Bypass GDPR Consent to Track Users

Multiple Purposes, Multiple Problems: A User Study of Consent Dialogs after GDPR

Accept All: The Landscape of Cookie Banners in Greece and the UK

Tracking technologies in eHealth: Revisiting the personalization-privacy paradox through the transparency-control framework

Addressing the 'Failure' of Informed Consent in Online Data Protection: Learning the Lessons from Behaviour-Aware Regulation

The Impact of Privacy Measures on Online Advertising Markets

Characterising Third Party Cookie Usage in the EU after GDPR

Privacy considerations for online advertising: a stakeholder’s perspective to programmatic advertising

Privacy regulations and economic efficiency: a dynamic perspective

Your Consent Is Worth 75 Euros A Year -- Measurement and Lawfulness of Cookie Paywalls

Whose Hands Are in the Finnish Cookie Jar?

Crumbled Cookie Exploring E-commerce Websites Cookie Policies with Data Protection Regulations

To Be or Not to Be (in the EU): Measurement of Discrepancies Presented in Cookie Paywalls (LONG)