EnCoRe : Ensuring Consent and Revocation

This paper draws on evidence from a series of expert focus groups to question the function of “informed consent” in online transactions. Informed consent and related concepts have a key role in much privacy research and are an integral part of much data protection legislation. The research methodology used in this paper was focus groups with expert participants and the paper describes this approach in detail. Four expert groups, with participants from civil society organizations, data protection professionals, public sector organizations and small and medium sized enterprises (SMEs) took part in the focus groups which ran for a total of 10 hours. This paper reports on the results from the focus groups in terms of a) privacy policies, b) control over the use of personal data, c) consent as a response to regulatory requirements and d) the nature of informed consent. The evidence from the focus groups questions the extent to which informed consent operates in online interactions. This suggests a number of novel research directions that arise from the analysis. The paper ends by suggesting alternative ways of addressing “informed consent” in online interactions.

[1]  Benjamin Gerber,et al.  Conceptualizing privacy , 2010, CSOC.

[2]  Jane Kaye,et al.  Revoking consent: A 'blind spot' in data protection law? , 2010, Comput. Law Secur. Rev..

[3]  J. Turow,et al.  How Different are Young Adults from Older Adults When it Comes to Information Privacy Attitudes and Policies? , 2010 .

[4]  Lorrie Faith Cranor,et al.  Standardizing privacy notices: an online study of the nutrition label approach , 2010, CHI.

[5]  Cathy Urquhart,et al.  Putting the ‘theory’ back into grounded theory: guidelines for grounded theory studies in information systems , 2009, Inf. Syst. J..

[6]  Varun Grover,et al.  The Effect of an IS Article's Structure on Its Impact , 2010, Commun. Assoc. Inf. Syst..

[7]  Alan R. Hevner,et al.  Focus Groups for Artifact Refinement and Evaluation in Design Research , 2010, Commun. Assoc. Inf. Syst..

[8]  Mary J. Culnan,et al.  How Ethics Can Enhance Organizational Privacy: Lessons from the ChoicePoint and TJX Data Breaches , 2009, MIS Q..

[9]  Edgar A. Whitley,et al.  Informational privacy, consent and the "control" of personal data , 2009, Inf. Secur. Tech. Rep..

[10]  Wayne G. Lutters,et al.  Developing expertise for network intrusion detection , 2009, Inf. Technol. People.

[11]  Ritu Agarwal,et al.  Adoption of Electronic Health Records in the Presence of Privacy Concerns: The Elaboration Likelihood Model and Individual Persuasion , 2009, MIS Q..

[12]  Klaus Hoeyer,et al.  Informed Consent: The Making of a Ubiquitous Rule in Medical Practice , 2009 .

[13]  E. Whitley.  Perceptions of government technology, surveillance and privacy: the UK Identity Cards Scheme , 2009 .

[14]  W. Garner.  Identity cards for foreign nationals , 2008 .

[15]  Norman A. Johnson,et al.  Personality traits and concern for privacy: an empirical study in the context of location-based services , 2008, Eur. J. Inf. Syst..

[16]  Paul De Hert,et al.  Identity management of e-ID, privacy and security in Europe. A human rights view , 2008, Inf. Secur. Tech. Rep..

[17]  Uwe Flick,et al.  Designing Qualitative Research , 2008 .

[18]  Edgar A. Whitley,et al.  Departmental Influences on Policy Design How the U.K.is confusing identity fraud with other policy agendas. , 2008 .

[19]  Ben Light,et al.  More Than Just Friends? Facebook, Disclosive Ethics and the Morality of Technology , 2008, ICIS.

[20]  Alessandro Acquisti,et al.  The Effect of Online Privacy Information on Purchasing Behavior: An Experimental Study , 2011, WEIS.

[21]  John C Moskop,et al.  Information Disclosure and Consent: Patient Preferences and Provider Responsibilities , 2007, The American journal of bioethics : AJOB.

[22]  Robert M Veatch,et al.  Implied, Presumed and Waived Consent: The Relative Moral Wrongs of Under- and Over-Informing , 2007, The American journal of bioethics : AJOB.

[23]  Aaron K. Martin,et al.  Managing Public Expectations of Technological Systems: A Case Study of a Problematic Government Project , 2007 .

[24]  Nigel Gilbert,et al.  Dilemmas of privacy and surveillance: chaljenges of technological change , 2007 .

[25]  Paul A. Pavlou,et al.  Understanding and Mitigating Uncertainty in Online Exchange Relationships: A Principal-Agent Perspective , 2007, MIS Q..

[26]  Hock-Hai Teo,et al.  The Value of Privacy Assurance: An Exploratory Field Experiment , 2007, MIS Q..

[27]  Hamid R. Nemati,et al.  The Effect of Consumer Privacy Empowerment on Trust and Privacy Concerns in E-Commerce , 2007, Electron. Mark..

[28]  Nikolajs Zeps,et al.  Waiver of individual patient consent in research: when do potential benefits to the community outweigh private rights? , 2007, The Medical journal of Australia.

[29]  Ian O. Angell,et al.  Reflections on the Academic Policy Analysis Process and the UK Identity Cards Scheme , 2006, Inf. Soc..

[30]  R. Barbour.  Introducing Focus Groups , 2007 .

[31]  E. Whitley.  Submission to the House of Lords Constitution Committee inquiry into the "Impact of Surveillance & Data Collection" , 2007 .

[32]  Sung S. Kim,et al.  Internet Users' Information Privacy-Protective Responses: A Taxonomy and a Nomological Model , 2008, MIS Q..

[33]  John Wadham,et al.  Blackstone's Guide to the Identity Cards Act 2006 , 2006 .

[34]  M. Watson,et al.  Main Report , 2006, Genetics in Medicine.

[35]  Tamara Dinev,et al.  An Extended Privacy Calculus Model for E-Commerce Transactions , 2006, Inf. Syst. Res..

[36]  Mayuram S. Krishnan,et al.  The Personalization Privacy Paradox: An Empirical Evaluation of Information Transparency and the Willingness to be Profiled Online for Personalization , 2006, MIS Q..

[37]  Ellen Perecman,et al.  A Handbook for Social Science Field Research: Essays & Bibliographic Sources on Research Design and Methods , 2006 .

[38]  Gary A. Ballinger,et al.  Information privacy in organizations: empowering creative and extrarole performance. , 2006, The Journal of applied psychology.

[39]  Irene Pollach.  A Typology of Communicative Strategies in Online Privacy Policies: Ethics, Power and Informed Consent , 2005 .

[40]  Mike Chiasson,et al.  If fair information principles are the answer, what was the question? An actor-network theory investigation of the modern constitution of privacy , 2005, Inf. Organ..

[41]  Naresh K. Malhotra,et al.  Internet Users' Information Privacy Concerns (IUIPC): The Construct, the Scale, and a Causal Model , 2004, Inf. Syst. Res..

[42]  Simon Rogerson,et al.  Are they really listening?: An investigation into published online privacy policies at the beginning of the third millennium , 2004, Inf. Technol. People.

[43]  Makoto Yokofujita,et al.  [Law and medical ethics]. , 2004, Nihon Hoshasen Gijutsu Gakkai zasshi.

[44]  Edgar A. Whitley,et al.  Configuring peer-to-peer software: an empirical study of how users react to the regulatory features of software , 2004, Eur. J. Inf. Syst..

[45]  Mary J. Culnan,et al.  Strategies for reducing online privacy risks: Why consumers read (or don't read) online privacy notices , 2004 .

[46]  P. Lunt,et al.  Privacy versus willingness to disclose in e-commerce exchanges: The effect of risk awareness on the relative role of trust and control , 2004 .

[47]  Oscar H. Gandy,et al.  Public Opinion Surveys and the Formation of Privacy Policy , 2003 .

[48]  Paul A. Pavlou,et al.  Consumer Acceptance of Electronic Commerce: Integrating Trust and Risk with the Technology Acceptance Model , 2003, Int. J. Electron. Commer..

[49]  Christopher Kuner,et al.  European Data Privacy Law and Online Business , 2003 .

[50]  Joann L. Roznowski,et al.  A content analysis of mass media stories surrounding the consumer privacy issue 1990-2001 , 2003 .

[51]  Edgar A. Whitley,et al.  The Footprint of Regulation: How Information Systems are Affecting the Sources of Control in a Global Economy , 2003, Information Systems Perspectives and Challenges in the Context of Globalization.

[52]  Malcolm Williams.  Making Sense of Social Research , 2002 .

[53]  Kevin D. Haggerty,et al.  The Public Politics of Opinion Research on Surveillance and Privacy , 2002 .

[54]  W. Wagner,et al.  Collective symbolic coping with new technology: Knowledge, images and public discourse. , 2002, The British journal of social psychology.

[55]  L. Bygrave.  Data Protection Law, Approaching Its Rationale, Logic and Limits , 2002 .

[56]  J. Law,et al.  Complexities: Social Studies of Knowledge Practices , 2002 .

[57]  Albert H. Segars,et al.  An Empirical Examination of the Concern for Information Privacy Instrument , 2002, Inf. Syst. Res..

[58]  Kai Lung Hui,et al.  Online Information Privacy: Measuring the Cost-Benefit Trade-Off , 2002, ICIS.

[59]  T. M. Williamson.  Research, Informed Consent, and the Limits of Disclosure , 2001 .

[60]  Karen Callaghan, Frauke Schnell,et al.  Assessing the Democratic Debate: How the News Media Frame Elite Policy Discourse , 2001 .

[61]  T. Wilkinson,et al.  Research, informed consent, and the limits of disclosure. , 2001, Bioethics.

[62]  S. Eckstein.  Ethical principles for medical research involving human subjects. , 2001, European journal of emergency medicine : official journal of the European Society for Emergency Medicine.

[63]  R. Ericson,et al.  The surveillant assemblage. , 2000, The British journal of sociology.

[64]  R. Petty.  Marketing without Consent: Consumer Choice and Costs, Privacy, and Public Policy , 2000 .

[65]  Sandra J. Milberg,et al.  Information Privacy: Corporate Management and National Regulation , 2000 .

[66]  N. Rose,et al.  Do the social sciences create phenomena?: the example of public opinion research. , 1999, The British journal of sociology.

[67]  M. Culnan,et al.  Information Privacy Concerns, Procedural Fairness, and Impersonal Trust: An Empirical Investigation , 1999 .

[68]  L. Hart,et al.  The Impact of Context on Data , 1999 .

[69]  Jane Frankland,et al.  Some issues arising in the systematic analysis of focus group materials. , 1998 .

[70]  Paul Burstein,et al.  Bringing the Public Back In: Should Sociologists Consider the Impact of Public Opinion on Public Policy? , 1998 .

[71]  K. Brants.  Who's Afraid of Infotainment? , 1998 .

[72]  Lucas D. Introna.  Privacy and the computer: why we need privacy in the information society , 1997 .

[73]  A. Elzinga.  The New Production of Knowledge. The Dynamics of Science and Research in Contemporary Societies , 1997 .

[74]  H. Jeff Smith,et al.  Information Privacy: Measuring Individuals' Concerns About Organizational Practices , 1996, MIS Q..

[75]  Paul Wang,et al.  Exploring the Dimensions of Consumer Privacy: An Analysis of Coverage in British and American Media , 1995 .

[76]  C. Ciborra,et al.  Formative contexts and information technology: Understanding the dynamics of innovation in organizations , 1994 .

[77]  J. Kitzinger.  The methodology of focus groups: the importance of interaction between research participants , 1994 .

[78]  Mary J. Culnan,et al.  "How Did They Get My Name?": An Exploratory Investigation of Consumer Attitudes Toward Secondary Information Use , 1993, MIS Q..

[79]  D. Morgan.  Successful Focus Groups: Advancing the State of the Art , 1993 .

[80]  Val Collins,et al.  Privacy in the United Kingdom: a Right Conferred by Europe? , 1993, Int. J. Law Inf. Technol..

[81]  Richard A. Krueger,et al.  Quality Control in Focus Group Research , 1993 .

[82]  G. M. Johnson,et al.  Understanding Communication Processes in Focus Groups , 1993 .

[83]  J. Knodel,et al.  The Design and Analysis of Focus Group Studies: A Practical Approach , 1993 .

[84]  K. Eisenhardt.  Building theories from case study research , 1989, STUDI ORGANIZZATIVI.

[85]  W. Gamson,et al.  Media Discourse and Public Opinion on Nuclear Power: A Constructionist Approach , 1989, American Journal of Sociology.

[86]  J. Rubenfeld.  The Right of Privacy , 1989 .

[87]  Janet Mancini Billson,et al.  Focus Groups: A Practical Guide for Applied Research , 1989 .

[88]  James M. Jasper,et al.  The Political Life Cycle of Technological Controversies , 1988 .

[89]  D. Leff,et al.  Crusading Journalism: Changing Public Attitudes and Policy-Making Agendas , 1986 .

[90]  Edward F. Fern.  The use of Focus Groups for Idea Generation: The Effects of Group Size, Acquaintanceship, and Moderator on Response Quantity and Quality , 1982 .

[91]  A. Downs.  Up and Down with Ecology--The Issue Attention Cycle , 1972 .

[92]  M. Lings,et al.  Articles , 1967, Soil Science Society of America Journal.

[93]  F. Crick,et al.  DEPARTMENT of Health, Education, and Welfare. , 1953, California medicine.