 So this is my first time doing presenting in a not in my own company or organization, so Bear with me. I'm gonna make mistakes. We'll live No could be problem and if we have a live demo with which includes the internet Which has been spotty so we can see what happens. I can talk about around it So hi, I'm Tom. I am contribute to and Contractor with Mozilla for some time and I'm talking I'm gonna talk to you about global consent manager. It's a tool a project and prototype for exploring how to better work with GDPR compliant compliance dialogues across websites on the internet so it's a project between Mozilla University of Nebraska University of Ohio and a Journalist Institute Which are all interested in moving beyond the current status, which is as we all know not great, so We are in Europe, so I'm gonna guess everyone is familiar with GDPR, right? and the thing that That concerns us more most on this talk is about the consent dialogues across websites that have to ask before tracking or Actually keeping any any personal info in any info about their visitors which includes Spam protection anything so they all feel obligated to do it right up front and right When you first visit the website and it's important for For them to stay compliant with the GDPR. It's a one complicated Legislation but With by the end of the talk, we'll see that it doesn't have to be like a loose loose situation for everyone. We are all familiar with this and who has clicking I Accept or I don't accept or something Third that doesn't they don't even understand what they are clicking Every time so everyone is Everyone is compliant all on the world companies even not in Europe are finding it easier to comply than to Segregate their websites some of some of them some are some are not segregated their website for European Consumers and non-European so basically if you live on Planet Earth GDPR applies to you and you're affected in a some way So what what's the issue with GDPR? It says that you have to Get meaningful consent from a person before tracking or keeping any kind of personal information about them if that means that if you Sorry, how how does the consumer decide to Give trust to them to the website a right up front when they first see the dialogue They don't have enough information to know do they trust this website to to give it consent to track them or to Personals they add or whatever so Even the industry the Interactive add at Bureau is a Industry organization that deals with online advertising. They're working. They have a proposal for standardized GDPR compliance and They're working they're working on a common consent die a consent Cookie beat and cookie string that has the that that would be transferable from website to website that would be Common that would be common way to interpret what does what does consent mean one when you click? I agree or I don't I don't give consent. What does that mean in what each site and they are Doing this to actually help Help smaller businesses be in compliance with GDPR so that you don't have to You don't have to hire lawyers for each and every Business each and every business have to hire lawyers to interpret what does complying with a GDPR mean it's a first good step forward but it Has flaws it has downsides. It's mostly concerned when we're protecting the industry and not with Protecting the users and informing the users and giving them a way to give meaningful consent so We are we are working we are proposing We are going to work with the industry to propose better solutions and that would be What GDP what global consent manager comes in this is a Tool for now, which is a prototype for research purposes and also useful useful for regular users in Europe and across the world that has That has that is able now to give you a glimpse of what potential future for Consent the other consent dialogues and and GDPR compliance might be in the future It's like a regular add-on on the add-ons on the Firefox add-on store. You can just go or just search for it install it. It's like Fairly simple. The idea is the bigger issue the implementation I'm gonna talk about the implementation later, but this is mostly built for a prototype for research purposes for now and To be useful for users at the same time and hope to bring something Meaningful to the industry as a standard for later. So How is it good for you if you ever click without? Just when you get a Then you get a link to a website. That's a new story. It's the first time you visit the website You don't really care to interact with it on a meaningful level. You just want to read The article that you got linked, right? So you mostly as most users if you're privacy conscious you try to find the Small they're usually hidden option to not I don't consent but still give me a way to view the website if you're as a most users you're gonna hit the most bright green or whatever button and Click except you don't have to mean it obviously. They don't know that you they have legal protection that you clicked it and Everyone's happy except that you gave consent within when you didn't mean to or you spent like five minutes looking for the option to Not give them consent. What's worse? Some websites. I'm not gonna. I'm gonna name names like the verge or some other websites Don't you have an option to not give them consent and still watch it's still read the articles They're gonna keep bugging you. They're gonna kick us keep asking you For consent on every single web page until you say yes. So basically every Every page that you read stick constant it has the bar underneath and you're annoyed and you're not productive and Even worse things happen. So I'm gonna attempt a live demo Now the idea beside behind the basic idea is to only present a consent dialogue once User has a meaningful relationship with the website. What does that mean? If you are visiting a website for the first time, you don't know if you trust them You don't know if you want to give them consent to to keep a cookie on you or whatever You don't know who they are and you don't you can't actually decide the only thing you can decide is to click No, or if you don't care, you can smash that button and get to the content So if you visit a website regularly, it makes sense that after you After you have a relationship, you know who they are you have the you know the brand You are able to meaning meaningfully understand when they ask you we will use these cookies to personal ads personalized ads for you or Remember your preferred language or topics or whatever they are using cookies that they need to send for They're gonna Be able you're gonna be able to understand what they're asking and you're gonna be able to meaningfully give that consent How does that work? I'm gonna try a live demo. Hopefully it works Since we are in Belgium. This is one of the websites that we support from I'm not even sure what what the website is. I don't speak the language This is how it work how it looks without In the normal way and you go to the I don't serve for global concept manager at Firefox in or in my case enable it and on the next visit of The website Voila you get regular normal website. You then get bothered you haven't given consent This is the important part. You haven't given consent. They are not tracking you right now. They don't know anything about you yet they're not You don't you don't have information and What does it do? It says right here or for on the status? This is the status page. This is a managed site. This means that we know about these sites and First visitors today not trusted. This means that we don't know this We haven't seen you visit this site. The extension keeps track of the sites to visit it's not gonna start trusting website just by Refreshing the page, but if you visit a site on five different days that seems like something that you might be interested in the future and Until then it's gonna block the consent dialogue from showing up that works for we have like a hundred website that we support for most popular news and similar websites across Europe and the world and They're gonna we are adding Any new popular website that user are requesting in this Prototype stage. How does it actually work? It works in two ways. It either sets a cookie for you Automatically to indicate to the website. I'm not consenting to tracking So if you visit a website one some of the website supports something like this that they are well-behaving websites You can set a cookie instead of you navigating and finding the button to to click I don't consent we do it for you when you visit the website right away until you have a Meaningful interaction with the website you get prompted after fair after five visits on five after five days of visits It could be over a month. It could be every single day for a week. You get actually presented from From the we allow the extension allows the website to ask you for consent right there Before there you can manually allow the website to ask you for consent or you can after it After we have the extension allows it to ask you you can manually deny it. So basically always in control you can Keep the dialogue showing Prevent them so we're showing you can give the trust you can answer the question. You can I'm gonna guess the green button does the thing that they want me to do and That's Basically, it's fairly simple. So that's the the well-behaving websites not all websites In fact most websites are not well behaving. They don't have a simple a cookie based way to indicate that you're you do not consent So in that case we use simple CSS to hide the consent dialogues. It's a little hockey, but Well, it works That's that's what how the extension for now works. This is so as I said, let me go back This is the you can see Probably more clear what it looks like when you first visit the website first visited today not trusted And you have always an option to manually Allow them to ask you for consent and you can give it you can deny it But you can do whatever after that. Those are the three Meaningful states. It's first visited previously visited. So that's when you you've been there We know that you've been there but not yet in fully trusted trusted state and after Currently it said that that this is a prototype. We have other ideas For example, if you write a comment on our website, we could use that as indicator that you want to interact with the website That so that can be that could trigger a trust there other ideas Some that we might implement later But the general idea is that the browser or in this case extension But the end goal is for the browser to do this for you if we can agree on the standard with Publishes for browser to manage That for the users and for the websites it can create a better environment for everyone Why do why do am I so confident in saying that? because Because we did a user study with extension for regular users browsing news websites He I think it was done in Ohio. So US residents and this is the right one It's obviously the one with the web users are more likely to stay in the website longer to visit more web pages We're not bombarded with the consent dialogue right away They are likely to after have a meaningful relationship with the website if they do and later you can date at the site can ask them for consent and The extension currently and in our proposal for the future of the browser Managers that's that for you. It keeps track of trust sites. You trust they let them let them let them ask you for consent and So We have This is it We're gonna learn more about the on the global that we have a website with lots of how-to's it Indeed goes in details how it works how it how you can map how you can set set it up the way you like It has some background info on GDPR basics and it has the user study that I just cited it's listed on the website and That's it. I have I'll take question. This is I have this is all dry information This is not a fun thing to talk about like marionette or like HTTP 3 from from Daniel and it's hard to follow, but I've run to it I'll take questions and if you don't Manage to find me later. I'll I'm happy to talk. Thank you so much Anyone have any questions? Okay, perfect So, how do you care not to get like any ad blockers? Website will inform you with this ad blockers if you want to with our website Yes, that's it. That's one of the Possible venues we strictly try to keep it separated Showing ads is still important for the website to maintain their Financial situation and to be able to so we've kept this talk This issue separate from blocking out, but that's one of the possibilities for later for well-behaving web tool for browser to do that for you to let the let The well-behaving websites show you ads and those the one that don't obey any rules They don't obey don't do not track them on the way Don't don't behave. Well, they will It's possible that we could go into blocking their ads automatically or even worse things like track track blocking trackers Which Firefox is doing independently of all this? so I think that And what about The the data you catch it how often I or how regularly I visited the website Do you catch it locally at my browser? Yeah, that's the extension just it just saves like a date and For the first five dates that it because it doesn't want to count five visits on the same date so it just saves the date for each website that you visited it last and When it is and you let it increases the count by one when it reaches five it stops counting It's minimal information needed to implement the fit feature Hopefully if you reach a standard for Among industry we can do the browser could do this you already trust the browser browser has the history for you And it can do even better, but currently it is minimally minimally that data Invasive way for you to actually provide a feature for you. Okay. Thanks We have Hi, hi, I have a question. I believe so if I understand correctly when you need to add a new site It you just need to have the technical way with the cookie to say to that you refuse tracking. There is no Contact with the site itself. So for example, if I want to add one website, which is not currently supported Who would I proceed proceed? We have a GitHub page. You just open an issue and list the website and if you are Interested in the details you can investigate yourself wet when selecting I don't consent and see what what cookie it sets. You don't have to do that We can do it if you If you don't know how to do it, but you report the website We we're gonna if you if you are inclined you can do it yourself and report what it does You can we accept full request as well So it's just a list of websites and the rule to either set CSS or to set the cookie for now It's fairly simple. It's fairly explanatory and that's how we do I think in the for this Yeah, yeah, we are we've been talking about automatically updating but People so that's possible on the future. So, you know Any other question we have in the first. Oh, okay. Sorry So currently I use an ad blocker to block these things What would be the benefit for me to switch to to this extension? Are there like any edge cases or Does the site behave differently when I'm using this extension compared to Normal ad blocker that just hides the notification when you say you use that worker does it hide all the consent dialogues for you? Well, I thought some of them not all of them. Yeah ad blockers are not meant for that Some that do that. It's mostly by accident. It's not their purpose main purpose and Second then so this is better specifically to afford that so it's gonna be work It's gonna work better at this for this you can use it with an ad blocker It doesn't interact with each other in any way So you eat the ad blocker box ads and tracking strips this block these blocks consent dialogues What what's the benefit for you for using this instead of an ad blocker? Depends on if you care about the websites showing you ads and everything this just lets you let you be less annoyed by all the dialogues But still allow showing the odds in case either not targeted or targeted after you accept the after you give consent so If you care about journalism getting financed and reading good journalism and fake news and everything that's a goal I don't have to go into that story, but that's one of the reasons why would you would use this instead of block fully blocking ads For the website. So basically it's more ethical. Is that what you're saying it's more ethical Because I will see ads, but I will not be tracked don't want to get into ethics I want to say it's more practical because this is how we get journalism finance more This is in interest as I show in the research This is in the interest in the industry of the industry as well So we believe it's a win-win situation win-win situation for everyone if you can get to this This is obviously just a project manually doing this. This is not this does not scale We can do a thousand web most popular websites and that's gonna cover a lot, but it doesn't scale So we believe everyone wins if we implement something like this on the browser level as a standard across Pepsi. So that's the Goal okay, any other question, okay, this is the last one This still assumes that the server side is well-behaving So that if you declare you don't want to be tracked and the server says okay, I hear you but I'm going to ignore you Yes, you can't have that. Yes, we have lost for that I mean Nothing you can't go all full for walking for yourself But that has other issues you break things you don't let them find out the cell This is mostly for meant to handle the Me the mainstream use case So a big website that has a brand that wants to interact with users in a meaningful and trusted way to build trust so this is meant for We have Firefox has anti-tracking for the other cases and It's slightly related, but it's not exactly Anti-tracking is not meant for those websites that have brands and want to preserve it and don't want to do shady stuff So this is meant for that part. The anti-tracking doesn't need to touch New York Times and the register Hopefully that's the that's the world in which I would love to like to live So that's what I'm what we are working on just to say I don't think I've said I was I'm not usually the person who present these things. I'm a developer for Mozilla and I was technical support for this website most of the Idea and research and everything was done by this these institutions on glow. So Mozilla was I believe Don Marty at Mozilla was the original idea University of Nebraska, Omaha, and Missouri with Reynolds Reynolds journalism Institute are doing the heavy work on this. I'm like a technical monkey, but I also Like I also believe in the project. So that's why I'm here today Okay, thank you so much. Don't miss laugh. Thank you everyone