22,000 人同意以社區服務換取免費 WiFi

In a landmark two-week experiment to highlight blind consent on public networks, Purple added a humorous 'Community Service Clause' to its guest WiFi terms and conditions. Over 22,000 users consented to perform 1,000 hours of community service (such as cleaning festival toilets, hugging stray animals, and scraping chewing gum from streets) to access free WiFi, with only a single person spotting the clause.

Traditional captive portal terms and conditions average between 1,600 and 3,000 words of complex legalese, taking an average of 8 to 15 minutes to read. Because users desire immediate internet access, over 99.9% accept terms without reading them, exposing themselves to unknown data sharing and tracking permissions.

Under GDPR (Article 7), consent for personal data processing and marketing must be freely given, specific, informed, and unambiguous. Captive portals cannot bundle marketing opt-ins into the basic terms required for internet access, cannot use pre-ticked checkboxes, and must clearly identify the data controller and data usage purposes.

Following the experiment and the introduction of GDPR, Purple reduced its guest WiFi privacy policy from 1,600 words down to a concise, plain-English 260-word micro-policy. This concise format allows visitors to understand data collection practices in under 70 seconds before connecting.

The Purple Profile Portal is a dedicated privacy management dashboard that gives WiFi end users complete visibility over the personal and behavioural data collected during venue visits. Users can view their stored profile, modify marketing opt-in preferences, or invoke their GDPR Article 17 right to erasure at any time.

Venue operators must unbundle marketing consent from network access terms, replace multi-page legalese with concise transparent summaries, maintain timestamped consent audit logs, and provide self-service preference management to eliminate manual Subject Access Request (SAR) overhead.