Usable and lawful: can consent be both?
Year: 2026
Type: article
Abstract: Under the GDPR, a valid consent must satisfy a number of requirements to comply with the General Data Protection Regulation (GDPR) and the ePrivacy Directive (ePD). The article evaluates the design of consent banners using a common and popular usability inspection method in human–computer interaction scholarship known as heuristic evaluation, which enables the researcher to identify challenges in technical provision and new generative opportunities for technical systems to better respond to legal requirements. Opportunities, challenges and tensions for a lawful and usable consent are identified through a novel application of usability heuristics to target the intersection of legal requirements and usability in the context of consent banners. These interpretations of the intersection of law and design may aid legal scholars in evaluating the lawfulness and usability of consent design strategies, while acknowledging the tensions and challenges among design and legal perspectives.
Institutions: Utrecht University, Indiana University Bloomington, Indiana University, Institut national de recherche en sciences et technologies du numérique, Centre Inria de l'Université Grenoble Alpes, Centre Inria d'Université Côte d'Azur, PRIVATICS: Modèles, architectures et outils pour la protection de la vie privée dans la société de l'information, Université Grenoble Alpes
Language: English
Subfield: Law
Field: Social Sciences
Domain: Social Sciences
Open Access status: hybrid
OpenAlex ID: W4415086583