Abstract
Online web analytics and web tracking, including the use of first-party and third-party cookies, are often perceived as a “black box”. Both rely on the collection of large amounts of data for various purposes - functional, analytical, and marketing - often without the user’s knowledge, for legitimate purposes such as improving the user experience, as well as more controversial reasons such as targeted advertising. This issue is reinforced by Google’s dominant position in web analytics, particularly through the widespread integration of Google Analytics (GA) into first-party cookies. At the same time, Europe is witnessing a rise in open government initiatives, particularly in line with the General Data Protection Regulation (GDPR), which aim to increase data transparency and accessibility for individuals. These initiatives often use open government data (OGD) portals as a means to disseminate government information. Our study, therefore, examines such platforms across Europe to determine the prevalence of web tracking activity and Google’s potential involvement. Our findings reveal a nuanced use of cookies within OGD portals, characterized by a significant presence of GA cookies. This situation raises debates about privacy (especially in relation to the presence of third-party cookies), transparency, and the possibility of transitioning to more ethically responsible analytics technologies in government digital services. We propose several practical recommendations for governments to improve their privacy efforts, including removing tracking practices, adopting open source analytics solutions, conducting regular audits, and improving public awareness of web tracking practices.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
Notes
- 1.
For an explanation about cookies and frame groups please refer to Google Chrome devtools documentation (reference in bibliography).
- 2.
The analysis of cookies on OGD portals provides a temporal snapshot that could differ due to site updates, geographical regulations, user behavior, and the browser or device utilized (e.g. system customizations or web tracking countermeasures).
- 3.
For a more detailed explanation of cookies categories, please visit Cookiepedia: https://cookiepedia.co.uk/classify-cookies.
- 4.
The counts presented in Fig. 2 represent the number of different types of cookies that were observed, not the total number of cookie. Each cookie type, regardless of its frequency across multiple sites, contributes only once to its category’s tally. For instance, despite the _ga cookie appearing on numerous pages, it is counted as a single entry in the analytical category.
References
Cooper, D.A., Yalcin, T., Nistor, C., Macrini, M., Pehlivan, E.: Privacy considerations for online advertising: a stakeholder’s perspective to programmatic advertising. J. Consum. Mark. 40(2), 235–247 (2023)
Soguel, N., Bundi, P., Mettler, T., Weerts, S.: Comprendre et concevoir l’administration publique, 1st edn., EPFL Press (2023)
Wirtz, B.W., Weyerer, J.C., Becker, M., Müller, W.M.: Open government data: a systematic literature review of empirical research. Electron. Mark. 32(4), 2381–2404 (2022)
Schedler, K., Guenduez, A.A., Frischknecht, R.: How smart can government be? Exploring barriers to the adoption of smart government. Inf. Polity 24(1), 3–20 (2019)
Johnson, G.: Economic research on privacy regulation: lessons from the GDPR and beyond (2022)
Bujlow, T., Carela-Español, V., Solé-Pareta, J., Barlet-Ros, P.: A survey on web tracking: mechanisms, implications, and defenses. Proc. IEEE 105(8), 1–34 (2017)
Besson, F., Bielova, N., Jensen, T.: Hybrid information flow monitoring against web tracking. In: 26th Computer Security Foundations Symposium, pp. 240–254. IEEE, New Orleans (2014)
Sanchez-Rola, I., Ugarte-Pedrerp, X., Santos, I., Bringas, P.G.: The web is watching you: a comprehensive review of web-tracking techniques and countermeasures. Log. J. IGPL 25(1), 18–29 (2016)
Debusseré, F.: The EU e-privacy directive: a monstrous attempt to starve the cookie monster? Int. J. Law Inf. Technol. 13(1), 70–97 (2005)
Samarasinghe, N., Adhikari, A., Mannan, M., Youssef, A.: Et tu, brute? Privacy analysis of government websites and mobile apps. In: ACM Web Conference, pp. 564–575. ACM, Lyon, France (2022)
Gotze, M., Matic, S., Iordanou, C., Smaragdakis, G., Laoutaris, N.: Measuring web cookies in governmental websites. In: Proceedings of the 14th ACM Web Science Conference 2022, Barcelona, Spain, pp. 44–54 (2022)
Peukert, C., Bechtold, S., Batikas, M., Kretschmer, T.: Regulatory spillovers and data governance: evidence from the GDPR. Mark. Sci. 41(4), 746–768 (2022)
Geradin, D., Katsifis, D., Karanikioti, T.: Google as a de facto privacy regulator: analyzing Chrome’s removal of third-party cookies from an antitrust perspective (2020)
Lourenço, R.P.: An analysis of open government portals: a perspective of transparency for accountability. Gov. Inf. Q. 32(3), 323–332 (2015)
Gomer, R., Rodrigues, E.M., Milic-Frayling, N., Schraefel, M.C.: Network analysis of third party tracking: user exposure to tracking cookies through search. In: IEEE/WIC/ACM (ed.) International Joint Conferences on Web Intelligence (WI) and Intelligent Agent Technologies (IAT), vol. 1, pp. 549–556. IEEE, Atlanta (2013)
Falahrastegar, M., Haddadi, H., Uhlig, S., Mortier, R.: Tracking personal identifiers across the web. In: In: Karagiannis, T., Dimitropoulos, X. (eds.) PMS 2016. LNCS, vol. 9631 pp. 30–41. Springer, Cham (2016). https://doi.org/10.1007/978-3-319-30505-9_3
Ermakova, T., Hohensee, A., Orlamünde, I., Fabian, B.: Privacy-invading mechanisms in e-commerce - a case study on German tourism websites. Int. J. Netw. Virtual Organ. 20(2), 105–126 (2017)
Ermakova, T., Fabian, B., Bender, B., Klimek, K.: Web tracking – a literature review on the state of research. In: 51st Hawaii International Conference on System Sciences, Hilton Waikoloa Village, Hawaii, pp. 4732–4741 (2018)
What are Cookies?. https://www.kaspersky.com/resource-center/definitions/cookies. Accessed May 2024
Roesner, F., Kohna, T., Wetherall, D.: Detecting and defending against third-party tracking on the web. In: 10th International Conference on Web and Social Media, San Jose, USA, pp. 155–168 (2012)
Brookman, J., Rouge, P., Alva, A., Yeung, C.: Cross-device tracking: measurement and disclosure, privacy enhance technologies, pp. 133–148 (2017)
Fourie, I., Bothma, T.: Information seeking: an overview of web tracking and the criteria for tracking software. In: Aslib (Ed.), pp. 264–284 (2007)
Mayer, J.R., Mitchell, J.C.: Third-party web tracking: policy and technology. In: IEEE Symposium on Security and Privacy, pp. 413–427. IEEE, San Francisco (2012)
Parra-Arnau, J.: Pay-per tracking: a collaborative masking model for web browsing. Inf. Sci. 1(385), 96–124 (2017)
Mikians, J., Gyarmati, L., Erramilli, V., Laoutaris, N.: Detecting price and search discrimination on the internet. In: 11th ACM Workshop on Hot Topics in Network, ACM, Washington, USA, pp. 79–84 (2012)
Hannak, A., Soeller, G., Lazer, D., Mislove, A., Wilson, C.: Measuring price discrimination and steering on E-commerce web sites. In: Internet Measurement Confer, pp. 305–318. ACM, Vancouver (2014)
Samarasinghe, N., Mannan, M.: Towards a global perspective on web tracking. Comput. Secur. 87(101569), 1–13 (2019)
Li, T.-C., Hang, H., Faloutsos, M., Efstathopoulos, P.: TrackAdvisor: taking back browsing privacy from third-party trackers. In: Mirkovic, J., Liu, Y. (eds.) PAM 2015. LNCS, vol. 8995, pp. 277–289. Springer, Cham (2015). https://doi.org/10.1007/978-3-319-15509-8_21
Chen, Q., Ilia, P., Polychronakis, M., Kapravelos, A.: Cookie swap party: abusing first-party cookies for web tracking. In: 2021 ACM Web Conference, Ljubljana, Slovenia, pp. 2117–2129 (2021)
Demir, N., Theis, D., Urban, Z., Pohlmann, N.: Towards understanding first-party cookie tracking in the field. arXiv preprint arXiv:2202.01498, pp. 1–20 (2022)
Pantelic, O., Jovic, K., Krstovic, S.: Cookies implementation analysis and the impact on user privacy regarding GDPR and CCPA regulations. Sustainability 14(9), 1–14 (2022)
The End of Google Analytics in Europe?. https://www.activemind.legal/guides/google-analytics/. Accessed 12 Jan 2024
Loftus, W.: Demonstrating success: web analytics and continuous improvement. J. Web Librariansh. 6(1), 45–55 (2012)
Plaza, B.: Monitoring Web Traffic Source Effectiveness with Google Analytics: An Experiment with Time Series, pp. 474–482. Aslib, Emerald Group Publishing Limited (2009)
Is Google Analytics 4 GDPR-compliant?. https://usercentrics.com/knowledge-hub/google-analytics-and-gdpr-compliance-rulings. Accessed 12 Jan 2024
Bertot, J.C., Jaeger, P.T., Grimes, J.M.: Using ICTs to create a culture of transparency: E-government and social media as openess and anti-corruption tools for societies. Gov. Inf. Q. 27(3), 264–271 (2010)
McDermott, P.: Building open government. Gov. Inf. Q. 27(4), 401–413 (2010)
Matheus, R., Janssen, M.: A systematic literature study to unravel transparency enabled by open government data: the window theory. Perform. Manag. Rev. 43(3), 503–534 (2020)
Open Government Data - What is Open Government Data?. https://www.oecd.org/gov/digital-government/open-government-data.htm. Accessed 14 Mar 2022
Nougrères, A.B.: Privacy is key in processing personal data by AI: UN expert, united nations, online (2023)
Tolbert, C.J., Mossberger, K.: The effects of E-government on trust and confidence in government. Public Adm. Rev. 66(3), 354–369 (2006)
Official Journal of the European Union, Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), pp. 1–88 (2016)
data.europe.eu. 2023 Open Data Maturity Report, p. 152 (2023)
Selenium documentation. https://www.selenium.dev/. Accessed 12 Mar 2024
Rasaii, A., Singh, S., Gosain, D., Gasser, O: Exploring the cookieverse: a multi-perspective analysis of web cookies. In: Brunstrom, A., Flores, M., Fiore, M. (eds.) PAM 2023. LNCS, vol. 13882, pp. 623–651. Springer, Cham (2023). https://doi.org/10.1007/978-3-031-28486-1_26
Englehardt, S., et al.: Cookies that give you away: the surveillance implications of web tracking. In: Proceedings of the 24th International Conference on World Wide Web, Florence, Italy, pp. 289–299 (2015)
Open Cookie Database. https://github.com/jkwakman/Open-Cookie-Database?tab=readme-ov-file. Accessed 12 Mar 2024
Kretschmer, M., Pennekamp, J., Wehrle, K.: Cookie banners and privacy policies: measuring the impact of the GDPR on the web. ACM Trans. Web (TWEB) 15(4), 1–42 (2021)
Pantelic, O., Jovic, K., Krstovic, S.: Cookies implementation analysis and the impact on user privacy regarding GDPR and CCPA regulations. Sustainability 14(9), 5015 (2022)
Habib, H., Li, M., Young, E., Cranor, L.: “Okay, whatever”: an evaluation of cookie consent interfaces. In: Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems, pp. 1–27 (2022)
Papadogiannakis, E., Papadopoulos, P., Kourtellis, N., Markatos, E.P.: User tracking in the post-cookie era: How websites bypass GDPR consent to track users. In: 2021 Proceedings of the web Conference, pp. 2130–2141 (2021)
Gamalielsson, J., et al.: Towards open government through open source software for web analytics: the case of Matomo. JeDEM-eJ. eDemocr. Open Govern. 13(2), 133–153 (2021)
Alby, T.: Popular, but hardly used: has Google Analytics been to the detriment of web Analytics?. In: 2023 Proceedings of the 15th ACM Web Science Conference, pp. 304–311 (2023)
Urban, T., Tatang, D., Degeling, M., Holz, T., Pohlmann, N.: Measuring the impact of the GDPR on data sharing in ad networks. In: Proceedings of the 15th ACM Asia Conference on Computer and Communications Security, pp. 222–235 (2020)
Winklbauer, S., Horner, R.: Austrian DPA decides EU-US data transfer through the use of google analytics to be unlawful. Eur. Data Prot. L. Rev. 8, 78 (2022)
Kollnig, K., Shuba, A., Van Kleek, M., Binns, R., Shadbolt, N.: Goodbye tracking? Impact of iOS app tracking transparency and privacy labels. In: Proceedings of the 2022 ACM Conference on Fairness, Accountability, and Transparency, Seoul, South Korea, pp. 508–520 (2022)
Tahaei, M., Li, T., Vaniea, K.: Understanding privacy-related advice on stack overflow. Priv. Enhanc. Technol. 2022(2), 114–131 (2022)
Libert, T.: An automated approach to auditing disclosure of third-party data collection in website privacy policies. In: Proceedings of the 2018 World Wide Web Conference, pp. 207–216 (2018)
The Federal Council, Federal Data Protection and Information Commisionner. https://www.edoeb.admin.ch/edoeb/en/home/datenschutz/grundlagen.html. Accessed January 2024
Borgolte, K., Feamster, N.: Understanding the performance costs and benefits of privacy-focused browser extensions. In: Proceedings of the Web Conference 2020, Taipei, Taiwan, pp. 2275–2286 (2020)
Várkonyi, G.G., Gradišek, A.: Data protection impact assessment case study for a research project using artificial intelligence on patient data. Informatica 44(4), 1–10 (2020)
Karami, F., Basin, D., Johnsen, E.B., DPL: a language for GDPR enforcement. In: 2022 IEEE 35th Computer Security Foundations Symposium (CSF), pp. 112–129. IEEE, Haifa (2022)
Kashi, E., Zavou, A.: Did I agree to this? Silent tracking through beacons. In: Moallem, A. (eds) HCII 2020. LNCS, vol. 12210, pp. 427–444. Springer, Cham (2020). https://doi.org/10.1007/978-3-030-50309-3_28
Al-Fannah, N.M., Mitchell, C.: Too little too late: can we control browser fingerprinting? J. Intellect. Cap. 21(2), 165–180 (2020)
Acar, G., et al.: The web never forgets: Persistent tracking mechanisms in the wild. In: Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, New York, USA, pp. 674–689 (2014)
Bollinger, D., Kubicek, K., Cotrini, C., Basin, D.: Automating cookie consent and {GDPR} violation detection. In: 31st USENIX Security Symposium (USENIX Security 2022), Boston, USA, pp. 2893–2910 (2022)
Acknowledgments
This study was funded by the Swiss National Science Foundation (grant number 212637). We would like to give a special thanks to Hugo Hueber, research engineer at the University of Lausanne, for his support.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Ethics declarations
The authors have no competing interests to declare that are relevant to the content of this article.
Rights and permissions
Copyright information
© 2024 IFIP International Federation for Information Processing
About this paper
Cite this paper
Stepanovic, S., Mori, L., Francey, A., Mettler, T. (2024). Transparency in Open Government Data Portals: An Assessment of Web Tracking Practices Across Europe. In: Johannessen, M.R., et al. Electronic Participation. ePart 2024. Lecture Notes in Computer Science, vol 14891. Springer, Cham. https://doi.org/10.1007/978-3-031-70804-6_14
Download citation
DOI: https://doi.org/10.1007/978-3-031-70804-6_14
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-70803-9
Online ISBN: 978-3-031-70804-6
eBook Packages: Computer ScienceComputer Science (R0)