TY - JOUR A1 - Momen, Nurul A1 - Hatamian, Majid A1 - Fritsch, Lothar T1 - Did app privacy improve after the GDPR? T2 - IEEE Security & Privacy N2 - What are the effects of the GDPR on consumer apps? This article presents an analysis of app behavior before and after the regulatory change in data protection in Europe. Based on long-term data collection, we present differences in app permission use and expressed user concerns and discuss their implications. In May 2018, the General Data Protection Regulation (GDPR) changed the data protection obligations of the information industry with the European Union users substantially. One should expect to find changes in code, program behavior and data collection activities. To investigate this expectation, we analyzed data about Android apps request and use of permissions to access sensitive group of data on smartphones, and collected user reviews. Our data shows an overall reduction of both permissions used and of expressed user concern. However, in some areas apps have increased access or user complaints while in addition, many apps carry with them several unused access privileges. Y1 - 2022 UR - http://publikationen.ub.uni-frankfurt.de/frontdoor/index/index/docId/51680 UR - https://nbn-resolving.org/urn:nbn:de:hebis:30:3-516806 N1 - Postprint, zuerst in IEEE Security & Privacy, 17.2019, Issue 6, S. 10-20, doi:10.1109/MSEC.2019.2938445 VL - 17.2019 SP - 1 EP - 10 ER -