Layered, Overlapping, and Inconsistent: A Large-Scale Analysis of the Multiple Privacy Policies and Controls of U.S. Banks

We provide artifacts for the paper "Layered, Overlapping, and Inconsistent: A Large-Scale Analysis of the Multiple Privacy Policies and Controls of U.S. Banks" published at ACM CCS 2025.

The research questions are

- RQ1: How many privacy policies are consumers likely to encounter for a given U.S. bank? What do their length and readability reveal about the effort required for consumers to understand a bank’s data practices?

- RQ2: What do a bank's multiple privacy policies, provided in response to different regulations, disclose about third-party sharing practices regarding marketing and advertising purposes? Are these disclosures consistent across multiple policies provided by the \textit{same} bank?

- RQ3: How many privacy opt-outs do banks provide regarding third-party sharing for marketing purposes, as required by different regulations?