People who want to limit the behavioural advertising and tracking they are subjected to on the web aren't well served by some popular privacy tools, according to a Carnegie Mellon University study.
Researchers in America concluded that the tools evaluated in the study, which included IE and Firefox components, were generally too complicated and confusing, leading people to misuse them.
"We found serious usability flaws in all nine tools we examined," read the 38-page report.
The nine tools fall into three main categories: tools that block access to advertising websites; tools that create cookies that indicate users want to opt out of behavioural advertising; and privacy tools built into web browsers.
The researchers enlisted 45 people to try out the tools. The participants weren't technical experts, nor were they knowledgeable about privacy tools, but did have an interest in this type of tool.
Each tool was tried out by five participants. Researchers observed how participants installed and configured the tools, and recorded the users' perceptions and opinions.
Default settings 'inappropriate'
"None of the nine tools we tested empowered study participants to effectively control tracking and behavioural advertising according to their personal preferences," the researchers wrote.
Tools for creating opt-out cookies give users a laundry list of ad networks with little or no additional information for users to decide which ones to block.
As a result, users generally opted to block all ad network trackers instead of making informed decisions on a per-company basis, the researchers found.
Another problem concerned the default settings for most tools, which were "inappropriate" because they come out-of-the-box with most protections turned off, putting the onus on users to activate and configure them.
A related issue is that the tools do a poor job of explaining to users how they work and how they should be configured, presenting information in terms that were either too simplistic or too technical.
Tools difficult to use
And once configured, the tools didn't clearly communicate to users what they were doing, particularly when they blocked specific content and functionality in websites users were visiting.
The design of the user interfaces also contributed to the users' confusion and inability to properly use the tools, according to the study.
"Our results suggest that the current approach for advertising industry self-regulation through opt-out mechanisms is fundamentally flawed," the researchers wrote.
The tools evaluated by the study are DAA Consumer Choice from the Digital Advertising Alliance; Global Opt-Out and Ghostery 2.5.3, both from Evidon; Privacy Choice's PrivacyMark; TACO 4.0 from Abine; Adblock Plus 1.3.9; Mozilla Firefox 5's privacy panel; and Microsoft IE9's privacy controls and Tracking Protection mechanism.
Rob Shavell, co-founder of Abine, agrees with the researchers' general conclusion.
"People need easier-to-use tools," said Shavell, adding that Abine is working hard to make TACO (Targeted Advertising Cookie Opt-out) simpler.
"We'll get there. We'll create an awesome product," he said. "We're making it easier every day."
Microsoft Tracking Protection Lists
There is an ongoing discussion among privacy software vendors, online advertising providers and government regulators about simplifying tools and processes for consumers so that they can more easily control online behavioral ad tracking, such as through the proposed Do Not Track standard, Shavell said.
Complicating matters is that interest among consumers in tools that offer control over online tracking is fairly new, so users aren't generally familiar with this type of software, he said.
A spokeswoman for Microsoft said the Tracking Protection feature in IE9 lets users add "an industry curated" tracking protection list with one click.
"Tracking Protection Lists offers consumers an opt-in mechanism to identify and block many forms of undesired tracking," she said.
These lists, compiled by third-party organisations with expertise in this field, let users control which third-party site content can track them when they're online, and they can be designed to either "block" or "allow" certain third party content, she said.
"IE9 also includes the broadly discussed Do Not Track User Preference - via both a DOM property and an HTTP header, as described in the W3C submission - as a secondary method," she added.
'Transparency' over opt-out mechanisms
Scott Meyer, founder and CEO of Evidon, said his company's products aim to create "transparency," not just opt-out mechanisms.
"Transparency enables consumers to make more informed decisions, and the fact is that the vast majority choose not to opt-out when presented with more information," he said. "Our research shows that 67% of consumers feel more positive about brands which give them this level of transparency and control."
Jim Brock, Privacy Choice's CEO and founder, said independent tests such as the one from Carnegie Mellon are very valuable, even if they are subjective, and Privacy Choice will take the findings into account.
However, Privacy Choice's principal blocking service for consumers is TrackerBlock, which the Carnegie Mellon researchers didn't include in the study, and not PrivacyMark, he said.
In addition, internal surveys at Privacy Choice reveal that more than 75% of PrivacyMark users understand what the service does and would recommend it to a friend, he said.
Sid Stamm, Mozilla's privacy engineer, said that the Firefox privacy panel is continuing to evolve to make it easier for users to navigate and understand as well as include new tools like Do Not Track.
The Digital Advertising Alliance and Adblock Plus didn't immediately respond to a request for comment.