OPC key findings:
76 per cent of privacy policies were very long (over 3,000 words)
1
1
Complex and confusing language: Technical and/or excessively long privacy policies that are difficult to understand
Long and difficult to understand privacy policies
Examples:
Websites and mobile apps that use complex and confusing language in their privacy policies make it difficult for users to understand how their personal information is collected, used and disclosed.
Confusing pop-up privacy notices
Complex and confusing language was the most common type of deceptive design pattern and appeared in 96 per cent of websites and mobile apps
83 per cent of privacy policies were difficult to read (required university or graduate education reading level)
Privacy policies should include simple explanations with key information (additional details could be linked)
OPC recommendations:
Privacy information should be easy to understand
