Uninformed Consent: The Benefits and Limits of Transparency and Choice in Privacy Decision Making

• Main Author: Adjerid, Idris
• Format: Others
• Published: Research Showcase @ CMU 2013
• Online Access: http://repository.cmu.edu/dissertations/403; http://repository.cmu.edu/cgi/viewcontent.cgi?article=1403&context=dissertations

Solutions to privacy concerns centered on notifying consumers about (transparency), and granting them control over the collection and use of their personal information (choice) are pervasive. Policy makers posit that these measures will aid consumers in improved privacy decision making. Conversely, scholars argue that these protections may have a negative impact on market efficiency and firm technology innovation and adoption. Chapter 2 evaluates the impact of regulation providing consumers transparency and choice on technology adoption by hospitals and finds, in contrast to prior results, evidence for a beneficial role of privacy regulation. I also find evidence that these gains may be a result of reduced barriers to adoption stemming from consumer privacy concerns. In Chapters 3 and 4 I shift my focus to evaluate the premise proposed by policy makers that increased transparency and choice will improve consumer privacy decision making. In Chapter 3, I first find that simple privacy notices communicating lower privacy decision making. I Chapter 3, I first find that simple privacy notices communication lower privacy protection can, under some conditions, result in less disclosure from participants, in-line with the policy aims for increased transparency. However, I also find that simple and common changes in those same notices, exploiting individual heuristics and biases, can result in the effect of even straightforward and accessible privacy notices being predictably manipulated (Experiment 1) or entirely thwarted (Experiment 2). Finally, in chapter 4 I find substantial malleability in individual privacy decision making in response to changes in choice framing. Specifically, the labeling of settings, the mix of setting relevance, and the presentation of choices as a choice to reject all impacted the decision frame for participants in a manner that significantly influenced participants' choice of privacy protective settings. Taken together, these results suggest that while privacy solutions centered on transparency and choice may alleviate barriers to technology adoption stemming from consumer privacy concerns, the implicit assumption that they will reduce consumer privacy risks may be questioned. Implications for policy makers include a persistence, and perhaps increase, in consumer privacy risks despite increased transparency and control.