Data Protection Day will be celebrated internationally on 28th January.

A statement from the GRA follows below:

Its  aim is to raise awareness of the importance of privacy and data protection, particularly  in light of the ever-increasing challenges faced in our increasingly globalized and  digitised world. This year, the Gibraltar Regulatory Authority (the “GRA”), as the  Information Commissioner, has published an awareness-raising audio-visual,  highlighting key information relating to deceptive design patterns in online platform  interfaces (the “Video”).  

Deceptive design patterns are considered conniving interfaces and user journeys  implemented by online platforms. They may show up as tricky colour schemes,  frustrating mazes, sneaky designs, and confusing language. Online platforms use these  techniques to influence you into making unintended, unwilling and potentially harmful  decisions, often into a direction that benefits them more than it benefits you. 

The Video, accessible on the data protection section of the GRA’s website and social  media platforms, offers practical guidance to the public and organisations on how to  assess and avoid deceptive design patterns which so regularly influence users’ online  journeys. Deceptive design patterns may, for example, mislead individuals into making  unintended, unwilling, and potentially harmful decisions, which consequently hinder  their ability to effectively protect their personal data. 

The six categories of deceptive design patterns addressed within the Video result from  an interdisciplinary analysis of existing interfaces as explored by European Data  Protection Authorities and published guidelines. 

Further to this awareness raising initiative, over the coming weeks, the GRA will also  be reviewing the practices of local entities as part of an international initiative of the  Global Privacy Enforcement Network.  

By raising awareness, the GRA aims to empower the public against deceptive design  patterns, whilst the regulatory reviews and initiatives will focus on promoting  compliance and best practice locally, taking appropriate action where necessary. 

The GRA’s focus on deceptive design patterns is in keeping with current and emerging  risks identified by the international community of data protection and privacy  regulators.