Usable and lawful: can consent be both?

  • Cristiana Santos*
  • , Colin M. Gray
  • , Nataliia Bielova
  • , Sanju Ahuja
  • *Corresponding author for this work

Research output: Contribution to journalArticleAcademicpeer-review

Abstract

Under the GDPR, a valid consent must satisfy a number of requirements to comply with the General Data Protection Regulation (GDPR) and the ePrivacy Directive (ePD). The article evaluates the design of consent banners using a common and popular usability inspection method in human–computer interaction scholarship known as heuristic evaluation, which enables the researcher to identify challenges in technical provision and new generative opportunities for technical systems to better respond to legal requirements. Opportunities, challenges and tensions for a lawful and usable consent are identified through a novel application of usability heuristics to target the intersection of legal requirements and usability in the context of consent banners. These interpretations of the intersection of law and design may aid legal scholars in evaluating the lawfulness and usability of consent design strategies, while acknowledging the tensions and challenges among design and legal perspectives.

Original languageEnglish
JournalInformation and Communications Technology Law
DOIs
Publication statusE-pub ahead of print - 7 Jan 2026

Bibliographical note

Publisher Copyright:
© 2026 Informa UK Limited, trading as Taylor & Francis Group.

Keywords

  • Consent
  • consent banners
  • dark patterns
  • ePrivacy directive
  • GDPR
  • usability

Fingerprint

Dive into the research topics of 'Usable and lawful: can consent be both?'. Together they form a unique fingerprint.

Cite this