Privacy attitudes and privacy behaviour: A review of current research on the privacy paradox phenomenon

Do people really care about their privacy? Surveys show that privacy is a primary concern for citizens in the digital age. On the other hand, individuals reveal personal information for relatively small rewards, often just for drawing the attention of peers in an online social network. This inconsistency of privacy attitudes and privacy behaviour is often referred to as the "privacy paradox". In this paper, we present the results of a review of research literature on the privacy paradox. We analyse studies that provide evidence of a paradoxical dichotomy between attitudes and behaviour and studies that challenge the existence of such a phenomenon. The diverse research results are explained by the diversity in research methods, the different contexts and the different conceptualisations of the privacy paradox. We also present several interpretations of the privacy paradox, stemming from social theory, psychology, behavioural economics and, in one case, from quantum theory. We conclude that current research has improved our understanding of the privacy paradox phenomenon. It is, however, a complex phenomenon that requires extensive further research. Thus, we call for synthetic studies to be based on comprehensive theoretical models that take into account the diversity of personal information and the diversity of privacy concerns. We suggest that future studies should use evidence of actual behaviour rather than self-reported behaviour.

[1]  J. Phelps,et al.  The Privacy Paradox: The Case of Secondary Disclosure , 2009 .

[2]  Richard S. Rosenberg,et al.  The Social Impact of Computers , 1992 .

[3]  Danah Boyd,et al.  Facebook privacy settings: Who cares? , 2010, First Monday.

[4]  Nathanael Paul,et al.  Election security: Perception and reality , 2004, IEEE Security & Privacy Magazine.

[5]  Marie Caroline Oetzel,et al.  The online privacy paradox: a social representations perspective , 2011, CHI Extended Abstracts.

[6]  Alessandro Acquisti,et al.  Privacy in electronic commerce and the economics of immediate gratification , 2004, EC '04.

[7]  Mary Beth Rosson,et al.  The personalization privacy paradox: An exploratory study of decision making process for location-aware marketing , 2011, Decis. Support Syst..

[8]  Daniel R. Horne,et al.  The Privacy Paradox: Personal Information Disclosure Intentions versus Behaviors , 2007 .

[9]  David E. Millard,et al.  Unpicking the privacy paradox: can structuration theory help to explain location-based privacy decisions? , 2013, WebSci.

[10]  Ronald E. Leenes,et al.  Privacy Risk Perceptions and Privacy Protection Strategies , 2007, IDMAN.

[11]  Tamara Dinev,et al.  An Extended Privacy Calculus Model for E-Commerce Transactions , 2006, Inf. Syst. Res..

[12]  David A. Wagner,et al.  Choice Architecture and Smartphone Privacy: There's a Price for That , 2012, WEIS.

[13]  Sabine Trepte,et al.  Is the privacy paradox a relic of the past? An in‐depth analysis of privacy attitudes and privacy behaviors , 2015 .

[14]  A. Bandura Social cognitive theory: an agentic perspective. , 1999, Annual review of psychology.

[15]  Sung S. Kim,et al.  Internet Users' Information Privacy-Protective Responses: A Taxonomy and a Nomological Model , 2008, MIS Q..

[16]  O. Günther,et al.  Privacy concerns and identity in online social networks , 2009 .

[17]  Anabel Quan-Haase,et al.  PRIVACY PROTECTION STRATEGIES ON FACEBOOK , 2013 .

[18]  Kai Lung Hui,et al.  Overcoming Online Information Privacy Concerns: An Information-Processing Theory Approach , 2007, J. Manag. Inf. Syst..

[19]  Colin Camerer Bounded Rationality in Individual Decision Making , 1998 .

[20]  D. Kahneman,et al.  Heuristics and Biases: The Psychology of Intuitive Judgment , 2002 .

[21]  Raimondo Iemma,et al.  Privacy evaluation: what empirical research on users’ valuation of personal data tells us , 2014 .

[22]  Chuan-Hoo Tan,et al.  Addressing the Personalization-Privacy Paradox: An Empirical Assessment from a Field Experiment on Smartphone Users , 2013, MIS Q..

[23]  Monika Taddicken,et al.  The 'Privacy Paradox' in the Social Web: The Impact of Privacy Concerns, Individual Characteristics, and the Perceived Social Relevance on Different Forms of Self-Disclosure1 , 2014, J. Comput. Mediat. Commun..

[24]  Joseph S. Valacich,et al.  Unpacking the Privacy Paradox: Irrational Decision-Making within the Privacy Calculus , 2012, ICIS.

[25]  Alessandro Acquisti,et al.  Misplaced Confidences , 2013, WEIS.

[26]  Elgar Fleisch,et al.  Blissfully ignorant: the effects of general privacy concerns, general institutional trust, and affect in the privacy calculus , 2015, Inf. Syst. J..

[27]  Günter Müller,et al.  Type Indeterminacy in Privacy Decisions: The Privacy Paradox Revisited , 2012, QI.

[28]  Alessandro Acquisti,et al.  Privacy and rationality in individual decision making , 2005, IEEE Security & Privacy.

[29]  Jens Grossklags,et al.  What Can Behavioral Economics Teach Us about Privacy , 2008 .

[30]  Alessandro Acquisti,et al.  The Effect of Online Privacy Information on Purchasing Behavior: An Experimental Study , 2011, WEIS.

[31]  Alessandro Acquisti,et al.  Privacy Attitudes and Privacy Behavior - Losses, Gains, and Hyperbolic Discounting , 2004, Economics of Information Security.

[32]  A. Acquisti Losses , Gains , and Hyperbolic Discounting : An Experimental Approach to Information Security Attitudes and Behavior , 2003 .

[33]  Alessandro Acquisti,et al.  Self-Reported Social Network Behavior: Accuracy Predictors and Implications for the Privacy Paradox , 2013, 2013 International Conference on Social Computing.

[34]  David L. Mothersbaugh,et al.  Disclosure Antecedents in an Online Service Context , 2012 .

[35]  A. Kellerman,et al.  The Constitution of Society : Outline of the Theory of Structuration , 2015 .

[36]  Bernhard Debatin,et al.  Facebook and Online Privacy: Attitudes, Behaviors, and Unintended Consequences , 2009, J. Comput. Mediat. Commun..

[37]  Vijay Erramilli,et al.  Your browsing behavior for a big mac: economics of personal information online , 2011, WWW.

[38]  Emily Christofides,et al.  Information Disclosure and Control on Facebook: Are They Two Sides of the Same Coin or Two Different Processes? , 2009, Cyberpsychology Behav. Soc. Netw..

[39]  Jorge Gonçalves,et al.  Sharing Ephemeral Information in Online Social Networks: Privacy Perceptions and Behaviours , 2011, INTERACT.

[40]  Daniel J. Solove A Taxonomy of Privacy , 2006 .

[41]  Tobias Kowatsch,et al.  Privacy Paradox Revised: Pre-Existing Attitudes, Psychological Ownership, and Actual Disclosure , 2014, ICIS.

[42]  Cliff Lampe,et al.  Privacy in Interaction: Exploring Disclosure and Social Capital in Facebook , 2012, ICWSM.

[43]  C. Lutz,et al.  Privacy Concerns and Online Behavior – Not so Paradoxical after All? Viewing the Privacy Paradox Through Different Theoretical Lenses , 2014 .

[44]  Thomas Hughes-Roberts,et al.  Privacy and Social Networks: Is Concern a Valid Indicator of Intention and Behaviour? , 2013, 2013 International Conference on Social Computing.

[45]  Peter Mayer,et al.  Rethinking the Privacy Calculus: On the Role of Dispositional Factors and Affect , 2013, ICIS.

[46]  Zeynep Tufekci Can You See Me Now? Audience and Disclosure Regulation in Online Social Network Sites , 2008 .

[47]  Colin Beardon,et al.  Facing the challenge of risk and vulnerability in an information society : proceedings of the IFIP WG9.2 Working Conference on Facing the Challenge of Risk and Vulnerability in an Information Society, Namur, Belgium, 20-22, 1993 , 1993 .

[48]  Hyejin Park,et al.  Why do people share their context information on Social Network Services? A qualitative study and an experimental study on users' behavior of balancing perceived benefit and risk , 2013, Int. J. Hum. Comput. Stud..

[49]  Bettina Berendt,et al.  E-privacy in 2nd generation E-commerce: privacy preferences versus actual behavior , 2001, EC '01.

[50]  Eytan Adar,et al.  Valuating Privacy , 2005, WEIS.

[51]  F. Tönnies,et al.  Community and Society , 1988 .

[52]  Leibniz-Informationszentrum Wirtschaft Unwillingness to pay for privacy: A field experiment , 2011 .

[53]  Zhenhui Jiang,et al.  Research Note - Privacy Concerns and Privacy-Protective Behavior in Synchronous Online Social Interactions , 2013, Inf. Syst. Res..

[54]  Young Min Baek,et al.  My privacy is okay, but theirs is endangered: Why comparative optimism matters in online privacy concerns , 2014, Comput. Hum. Behav..

[55]  Young Min Baek,et al.  Solving the privacy paradox: A counter-argument experimental approach , 2014, Comput. Hum. Behav..

[56]  Robin L. Wakefield The influence of user affect in online information disclosure , 2013, J. Strateg. Inf. Syst..

[57]  Susan B. Barnes,et al.  A privacy paradox: Social networking in the United States , 2006, First Monday.

[58]  Bo Zhang,et al.  Unlocking the privacy paradox: do cognitive heuristics hold the key? , 2013, CHI Extended Abstracts.

[59]  Jae-Shin Lee,et al.  Optimistic bias about online privacy risks: Testing the moderating effects of perceived controllability and prior experience , 2010, Comput. Hum. Behav..

[60]  Torsten Eymann,et al.  The Unconscious App Consumer: Discovering and Comparing the Information-seeking Patterns among Mobile Application Consumers , 2014, ECIS.

[61]  E. Phelps,et al.  Neural mechanisms mediating optimism bias , 2007, Nature.

[62]  Dominique Peyrat-Guillard,et al.  Cultural and generational influences on privacy concerns: a qualitative study in seven European countries , 2014, Eur. J. Inf. Syst..

[63]  Colin Potts,et al.  Privacy practices of Internet users: Self-reports versus observed behavior , 2005, Int. J. Hum. Comput. Stud..

[64]  SonJai-Yeol,et al.  Internet users' information privacy-protective responses , 2008 .

[65]  Cliff Lampe,et al.  Negotiating Privacy Concerns and Social Capital Needs in a Social Media Environment , 2011, Privacy Online.

[66]  Shay Sayre,et al.  Trading Secrets For Savings: How Concerned Are Consumers About Club Cards As a Privacy Threat? , 2000 .

[67]  Barry A. T. Brown,et al.  Studying the Internet Experience , 2001 .

[68]  Paul Slovic,et al.  The affect heuristic , 2007, Eur. J. Oper. Res..