Dark patterns e proteção de dados pessoaiso descompasso entre a regulação e os banners de cookies

Resumo

This dissertation investigates how the Brazilian regulatory framework for the protection of personal data disciplines dark patterns, deceptive UI/UX design practices in the digital environment, and to what extent privacy notices (cookie banners) adopted by the most visited websites in the country comply with this normative framework. To address this research problem, the study adopts a mixed-methods approach, structured into two complementary stages: (i) content analysis of personal data protection regulations and the guidance instruments issued by the Brazilian Data Protection Authority (ANPD); and (ii) examination and categorization of the cookie banners implemented by the 500 most accessed websites in Brazi. The results show that, although Brazilian data protection regulation provides rules, standards/principles, and guidelines to constrain dark patterns, there is a high degree of asymmetry between regulatory content and market practices.Accordingly, the study is situated within the research line Economics, Intervention and Regulatory Strategies, as it analyzes the interaction between regulation, the behavior of economic agents, and UX/UI design strategies. It contributes to the regulatory debate by systematizing, for the first time in Brazil, the treatment of dark patterns within the field of personal data protection regulation and by providing empirical evidence on the level of compliance of cookie banners with this regulatory framework.

Ficha do documento

Tipo

Dissertação

Ano

2026

Instituição

Fundação Getulio Vargas

Fonte

Repositório da FGV

Idioma

Português

Acesso

Acesso aberto

Identificador

oai:repositorio.fgv.br:10438/38609

Temas

TecnologiaDados

Palavras-chave

Dark patternsBanners de cookiesConsentPersonal data protectionCookie bannersANPD (Brazilian Data Protection Authority)LGPD (Brazilian General Data Protection Law).ConsentimentoProteção de dados pessoaisANPDLGPDDireitoProteção de dadosPlataformas digitais - Medidas de segurançaCookies (Computação)Agência Nacional de Proteção de Dados (Brasil)Lei Geral de Proteção de Dados Pessoais (LGPD)