Bh Us 04 Acquisti

download Bh Us 04 Acquisti

of 73

Transcript of Bh Us 04 Acquisti

  • 8/12/2019 Bh Us 04 Acquisti

    1/73

    Privacy, Economics,

    and Immediate Gratification:Why Protecting Privacy is Easy,

    But Selling It is Not

    Alessandro Acquisti

    Heinz School, Carnegie Mellon UniversityPGuardian Technologies, Inc.

    acquistiandre!.c"u.edu

  • 8/12/2019 Bh Us 04 Acquisti

    2/73

    Why do we have great privacy enhancing

    technologies that almost no!ody uses"

    Why do so many people claim to !e concerned

    a!out privacy# and then do little to protect it"

  • 8/12/2019 Bh Us 04 Acquisti

    3/73

    It$s the economy, stupid%

    # Privacy is an econo"ic $ro%le"&

    # & even !hen $rivacy issues do not have directecono"ic inter$retation

    # Privacy is a%out trade'o((s) $ros*cons o(revealing*accessing $ersonal in(or"ation&

    + or individuals

    + or organizations# & and trade'o((s are the real" o( econo"ics

  • 8/12/2019 Bh Us 04 Acquisti

    4/73

    Agenda

    -. Privacy and the cono"y * cono"ics andPrivacy

    /. So Many 0$en 1uestions, So 2ittle Ti"e

    3. Privacy and 4ationality) Alternative 5$lanationsand Preli"inary Survey 4esults

  • 8/12/2019 Bh Us 04 Acquisti

    5/73

    1. Privacy and the EconomyEconomics and Privacy

  • 8/12/2019 Bh Us 04 Acquisti

    6/73

    Privacy and the econo"y

    6I a" under no "oral or other 0%ligation, to $u%lish to the 7orld, ho!

    "uch "y 5$enses and "y Inco"es a"ount to yearly. 8&9

    :issi"ulation is a %ranch o( 7isdo".;

    # 7arren and Brandeis, -D

    # 6ranElin Mills lour; girl, -D-=llis S"ith 8/DDD9@

    # SSFs, -3

    # 4etail Credit Co., T47

    # qui(a5, 5$erian

    # A"azon, 4eal Audio, eToys, /DDDs

  • 8/12/2019 Bh Us 04 Acquisti

    7/73

    Privacyand the roaring dot co" days

    &'ost commercial health(

    care We! sites lure

    consumers with free medical

    information, then sell data on

    them to third parties in waysthat threaten the consumer)s

    privacy*

    MarE S"ith, e%ruary -, /DDD

    &It is surprising how recently

    changes in law and technology

    have !een permitted to

    undermine sanctuaries of privacy

    that +mericans have long taen

    for granted*

    -Suddenly, shopping that had

    once seemed anonymous was

    !eing archived in personally

    identifia!le dossiers-

    FT Magazine, A$ril 3D, /DDD

    -In the !acground, advertising

    services are !uilding profiles of

    where people !rowse, what they

    !uy, how they thin, and who

    they are-

    -.or a!out / cents, some

    medical data sites will sell you

    your neigh!or)s history of urinary

    tract infections It will get worse*

    Business7eeE, March /D, /DDD

  • 8/12/2019 Bh Us 04 Acquisti

    8/73

    And then&

    #&0he overall B12 maret opportunity shouldreach 3456BN in transaction volume !y 1664*

    #Actually&

    Sources) orrester 4esearch and I:C, circa /DD-

    Glo%al 'Co""erce Transaction olu"e =JBF@

    0

    100

    200

    300

    400

    500

    2000 2001 2002 2003 2004

  • 8/12/2019 Bh Us 04 Acquisti

    9/73

    Ho! the maretreacted

    #cono"ic challenges $ushed "erchantsto!ards "ore intrusive $olicies)

    &0his policy may change from time to time

    so please chec !ac periodically*

    78ahoo% Privacy Policy, circa 1669

    :ata MarEeting :ata eiling

  • 8/12/2019 Bh Us 04 Acquisti

    10/73

    0echnology) The case o( the incredi%lyshrinEing anony"ous $ay"ents "arEet

    Cy%ersource

    Cyota, 0r%isco"

    ullyIdenti(ied

    Protected(ro"

    Merchants

    Protected (ro"Merchants and

    Credit CardIssuers

    Protected (ro"Merchants, CreditCard Issuers, and

    Shi$$ers

    i$rivacy

    PrivateBuy

    Pay$al, Ache5

    Cash, PGuardian

    From whom is the information anonymized

    W

    hatinformationisanonymized

  • 8/12/2019 Bh Us 04 Acquisti

    11/73

    And the ;awK

    # Fational Loo re(uses to release a deceased

    gira((es "edical records on grounds that it

    !ould violate the ani"als right to $rivacy

    =Politech, May /DD/@

    # An+nimal Privacy Entitlement +ctK

    # FoN A Patriot +ct instead

  • 8/12/2019 Bh Us 04 Acquisti

    12/73

    7hat a%out econo"icsK

    # Posner =-D@

    + Privacy as conceal"ent o( in(or"ation< focus

    + Privacy as quiet< little economic relevance

    + Privacy as (reedo"< no economic relevance

  • 8/12/2019 Bh Us 04 Acquisti

    13/73

    cono"ics and $rivacy

    # Fo!)

    + Privacy as conceal"ent o( in(or"ation ' yes

    + Privacy as quiet ' yes

    + Privacy as (reedo" + yesN

    # ven !hen $rivacy intrusions have no i""ediate econo"ic

    relevance, i""aterial di"ensions o( $rivacy still i"$act the

    !ell'%eing o( the individual

    # cono"ics o( ha$$iness and !ell'%eing

  • 8/12/2019 Bh Us 04 Acquisti

    14/73

    The evolutiono( the economics of privacy

    # arly -Ds

    + Chicago school vs. %roader vie!s o( $rivacy

    # Mid -Ds

    + The IT e5$losion) arian, Foa", 2audon, ClarEe

    # A(ter /DD-

    + The Internet) $ersonalization and dyna"ic %ehavior

    + Modeling) $rice discri"ination, in(or"ation andco"$etition, costs o( accessing custo"ers

    + "$irical studies) surveys and e5$eri"ents

    + cono"ics o( =$ersonal@ in(or"ation security

    =Anderson, arian, 7IS@

  • 8/12/2019 Bh Us 04 Acquisti

    15/73

    The early days) Stigler

    # Peculiar relation %et!een 6o!nershi$; and $rivacy+ In(or"ation a%out so"e%ody "ay have %een costly

    acquired %y other $eo$le

    # ree e5change o( in(or"ation !ill lead to desira%leresults regardless o( o!nershi$+ I( I a" a good de%tor, I !ant this in(or"ation to %e

    Eno!nO i( I a" a %ad de%tor, I !ant to Eee$ it secret

    + Su$$ose I a" a %ad de%tor) then, !hether I do notreveal in(or"ation or in(or"ation a%out "e is re$orted,I !ill $ay higher rates

  • 8/12/2019 Bh Us 04 Acquisti

    16/73

    The early days) Posner

    # Privacy as conceal"ent o( in(or"ation+ Individuals !ith %ad traits =e.g., $oor e"$loyees@ have

    an interest in hiding the"

    + Individuals !ith good traits have an interest in sho!ingthe"

    + 4educing in(or"ation availa%le to 6%uyers; in this"arEet =e"$loyers@ reduces e((iciency

    # 5tends argu"ent to non'"arEet %ehavior+ .g., "arriage

    # Costs o( conceal"ent %orne %y others+ .g., !hen $rivacy o( se5'o((enders is $rotected

    # Privacy is re'distri%utive and reduces e((iciency

  • 8/12/2019 Bh Us 04 Acquisti

    17/73

    The "id -Ds) Foa"

    # 7ith no transaction costs in trading ornegotiation, initial assign"ent o( $rivacy rights isar%itrary (ro" vie!$oint o( econo"ic e((iciency

    + ncry$tion# 6The e5istence o( encry$tion "ay largely deter"ine !ho has to

    $ay !ho", not !hether so"ething !ill ha$$en.;

    # ncry$tion "aEes other $arties $ay

    # 4edistri%utes !ealth to consu"ers

    # :i((iculties

    + Inco"$lete in(or"ation

    + Hu"an right

    + Burden on $oor

  • 8/12/2019 Bh Us 04 Acquisti

    18/73

    The "id -Ds) arian

    # Consu"ers rationally !ant certain Einds o( in(or"ation to%e availa%le to $roducers, not other Einds+ .g., consu"er !ants seller to Eno! !hat goods she liEes, %ut

    not how"uch she liEes the"

    # Annoyances co"es (ro" too little in(or"ation %eingshared+ .g., tele'"arEeters o((ering $roducts I do not !ant

    # E=ternalities derive (ro" secondary use o( in(or"ation

    # :e(ine $ro$erty rights in $rivate in(or"ation in !ays thatallo! consu"ers to retain control over ho! in(or"ationa%out the" is used+ .g., ti"ed contracts

    + .g., "aEe it costly to access certain digital in(or"ation

  • 8/12/2019 Bh Us 04 Acquisti

    19/73

    /DD- and a(ter) A ne! interestin the econo"ics o( $rivacy

    # Calzolari and Pavan =/DD-@

    # Taylor =/DD-@

    # Acquisti and arian =/DD-@

    # &

  • 8/12/2019 Bh Us 04 Acquisti

    20/73

    0$ti"al $rivacy $olicies

    # Calzolari and Pavan =/DD-@

    # Contracting environ"ents !here t!o 6$rinci$als; =e.g.,

    sellers@ sequentially interact !ith a co""on 6agent; =e.g.,

    %uyer@

    + irst seller releases in(or"ation that is correlated !ith agents

    ty$e

    # 7el(are e((ects o( $rivacy'$rotecting la!s that $reventin(or"ation disclosure on consu"ers sho$$ing activity

    + In(or"ation trans"ission %et!een t!o vendors "ay result in

    !el(are increase

    + 4educes =e5$ected@ distortions

  • 8/12/2019 Bh Us 04 Acquisti

    21/73

    Custo"er $rivacy

    # Taylor =/DD-@

    # alue o( custo"er in(or"ation derives (ro" a%ility o(

    (ir"s to identi(y individual consu"ers and charge the"

    $ersonalized $rices# Considers t!o settings) anony"ity regi"e and recognition

    regi"e

    # 7el(are co"$arisons de$end critically on !hether

    consu"ers antici$ate sale o( the list+ I( consu"ers do not (oresee sale o( their data, (ir"s have

    incentives to charge higher $rices

    + I( consu"ers antici$ate sale o( list, this results in lo!er $rices

    than !ould $revail under the anony"ity regi"e

  • 8/12/2019 Bh Us 04 Acquisti

    22/73

    Inducing custo"ers to try ne! goods

    # Acquisti and arian =/DD-@

    # CooEies'liEe technology vs. anony"izing technology

    # 1uestions

    + 7ill cooEies'liEe technology %ring "ore $ro(itsK

    + 7ill %uyers use the anony"izing technologyK

    # 4esults

    + Fo larger $ro(its (ro" cooEies'liEe technology&

    + & unless so"ething "ore is o((ered

    + Enhancedservices %ased on gathered in(or"ation

    + Anony"izing technologies could "aEe society !orse o((

  • 8/12/2019 Bh Us 04 Acquisti

    23/73

    Su""arizing results

    # Allo!ing (ir"s to use cooEies can"aEe

    custo"ers and society %etter o((

    # Sharing in(or"ation %et!een sellers reduces6distortions;

    # 7ith 6strategic; custo"ers, (ir"s %etter o((

    res$ecting custo"ers $rivacy

    # So, where is the pro!lem"

  • 8/12/2019 Bh Us 04 Acquisti

    24/73

    0(('line vs. on'line identities

    # >n(line identity# Carries in(or"ation a%out an individuals tastes, her $urchase

    history, etc. =e.g., A"azon account@

    # >ff(line identity# The $ersistent identity o( an individual, as revealed %y

    identi(iers such as credit card nu"%ers and social security

    nu"%ers

    # 0he pro!lem: ;ined on(line?off(line identities# :i((erent needs

    # 5ternalities

    # 0echnology can separate them Why is this not happening"

  • 8/12/2019 Bh Us 04 Acquisti

    25/73

    2. So Many !en "#estions$ So %itt&e 'ime

  • 8/12/2019 Bh Us 04 Acquisti

    26/73

    0$en questions

    -. Is too "uch $rivacy %ad (or youK

    /. :o you really have zero $rivacyK

    3. 7hat are the costs o( $rivacyK

    . 7ho should $rotect your $rivacyK

    . :o $eo$le really care a%out $rivacyK

  • 8/12/2019 Bh Us 04 Acquisti

    27/73

    Is too "uch $rivacy %ad (or youK

    or, too much privacy can act against the interests

    of society or the individual

    # cono"ics says)

    + More sharing o( on'line identity in(or"ation is good)"arEet la!s can allo! the right a"ount o(in(or"ation to %e shared

    + But, this is notin contradiction !ith $rotection o(

    $rivacy =o(('line identity@

    + Pro!lem: linages and trails shrins the anonymityset 7@aneAis and Serantov C1661D 0hen:

  • 8/12/2019 Bh Us 04 Acquisti

    28/73

    :o you really have zero $rivacyK

    &Get over it: 8ou already have Aero privacy*

    or, the loss of control on personal information is

    simply unavoida!le in our networed society

    # But in(or"ation technology can also)

    # ither linE or unlinE on'line and o(('line identities

    # 0r "aEe linEages di((icult =e.g., S!eeney 8/DD/9@

  • 8/12/2019 Bh Us 04 Acquisti

    29/73

    :o you really have zero $rivacyK

    # In al"ost every conceiva%le on'line and o(('linescenario, !e have develo$ed tools and "ethodsto adequately $rotect $rivacy

    +Anony"ous $ay"ents =e.g., Chau" 8-/9@+Anony"ous %ro!sing =e.g., Goldschlag et al8-9@

    + Private $re(erences =e.g., Canny 8/DD/9@

    + 4e'"ailers =e.g., Chau" 8--9@

    + =Good@ electronic voting =e.g.,

  • 8/12/2019 Bh Us 04 Acquisti

    30/73

    And yet&.

    # cono"ic argu"ents sho! that trade'o((s %et!eensharingandprotecting$ersonal in(or"ation "ay %ereconciled

    #Technology coulddo it

    #So, !hy econ Q technology did notdo itK

    # Solve the (ollo!ing equation).ind aprivacycom!ination convenientfor customers

    7eg Bo!,profita!lefor vendors 7eg +maAoncom,

    advantageousfor other e=isting players 7eg credit card

    networs, non replica!le!y competitors

  • 8/12/2019 Bh Us 04 Acquisti

    31/73

    7ho should $rotect your $rivacyK

    # Sel('regulationK

    + ails under $ressure

    # Policy*legislationK

    + U vs. US

    + Sa"uelson =/DD3@) The social costs o( con(using$rivacy $olicies

    # Individual res$onsi%ilityK+ Can individuals $rotect the"selvesK

    + Should theyK

  • 8/12/2019 Bh Us 04 Acquisti

    32/73

    Phrasing the $olicy de%ateK

    It is true that there are potential costs of using Gmail for

    email storage C#D 0he uestion is whether consumers

    should have the right to make that choice and

    balance the tradeoffs, or whether it will !epreemptively denied to them !y privacy fundamentalists

    out to deny consumers that choice

    '' :eclan McCullagh =/DD@

    # Can consu"ers really "aEe the choice that %est servestheir o!n interestsK

  • 8/12/2019 Bh Us 04 Acquisti

    33/73

    Privacy attitudes&

    # Attitudes) usage+ To$ reason (or not going online =Harris@

    + >R !ould increase Internet usage given "ore $rivacy

    =Harris@

    # Attitudes) sho$$ing+ J- %illion in lost e'tail sales =3R !ould sho$ "ore online !ith guarantee (or $rivacy

    =Harris@

    # ="ost o( the a%ove is /DD- data&@

  • 8/12/2019 Bh Us 04 Acquisti

    34/73

    & versus $rivacy %ehavior

    # Behavior

    + Anecdotic evidence

    # :FA (or BigMac

    + 5$eri"ents# S$ieEer"ann, GrossElags, and Berendt =/DD-@) $rivacy

    6advocates; Q ca"eras

    + veryday e5a"$les

    # :ot co" death%ed# A%undance o( in(or"ation sharing

  • 8/12/2019 Bh Us 04 Acquisti

    35/73

    5$lanations

    # Syverson =/DD3@

    + 64ational, a(ter all; e5$lanation

    # ShostacE =/DD3@

    + 67hen it "atters; e5$lanation

    # Hu%er"an =/DD@

    + 6Privacy and deviance; e5$lanation

    # +re there other e=planations"

  • 8/12/2019 Bh Us 04 Acquisti

    36/73

    3. Privacy and (ationa&ity)

    *&ternative E+!&anations

    and Pre&iminary S#rvey (es#&ts

  • 8/12/2019 Bh Us 04 Acquisti

    37/73

    Personal in(or"ationis a very $eculiar econo"ic good

    # Asy""etric in(or"ation

    + Individual does not Eno! ho!, ho! o(ten, (or ho! longher in(or"ation !ill %e used

    + Intrusions invisi%le and u%iquitous+ 5ternalities and "oral hazard

    # 5'$ost

    + alue uncertainty

    + ee$s on a((ecting individual a(ter transaction

    + I"agine) lu"$ su" vs. negative annuity

  • 8/12/2019 Bh Us 04 Acquisti

    38/73

    Personal in(or"ationis a very $eculiar econo"ic good

    # Conte5t'de$endent =states o( the !orld@

    +Anony"ity sets

    + 4eco"%inant gro!th

    + S!eeney =/DD/@) >R o( A"ericans uniquelyidenti(ia%le (ro" LIP code, %irth date, and se5

    # Su%ective

    + 67illingness to $ay; a((ected %y considerations %eyondtraditional "arEet reasoning

  • 8/12/2019 Bh Us 04 Acquisti

    39/73

    Personal in(or"ationis a very $eculiar econo"ic good

    # Both $rivate and $u%lic good as$ects

    +As in(or"ation, it is non rival and non e5cluda%le

    + et the "ore other $arties use that $ersonal

    in(or"ation, the higher the risEs (or original data o!ner# Buy vs. sell

    + Individuals value di((erentlyprotectionand sale o(sa"e $iece o( in(or"ation

    # 2iEe insurance, %ut&

  • 8/12/2019 Bh Us 04 Acquisti

    40/73

    & "ay%e %ecause&

    # & $rivacy issues actually originate (ro" twodi((erent "arEets

    + MarEet (or $ersonal in(or"ation

    + MarEet (or $rivacy# 4elated, %ut not identical

    # Con(usion leads to inconsistencies

    + :i((erent rules, attitudes, considerations

    # Pu%lic vs. $rivate

    # Selling vs. %uying

    # S$eci(ic vs. generic

    # alue (or other $eo$le vs. da"age to onesel(

    # 2u"$ su" vs. negative annuity

  • 8/12/2019 Bh Us 04 Acquisti

    41/73

    Privacy and rationality

    # Traditional econo"ic vie!) (or!ard looEing agent,utility "a5i"izer, %ayesian u$dater, $er(ectlyin(or"ed

    + Both in theoretical !orEs on $rivacy+And in e"$irical studies

  • 8/12/2019 Bh Us 04 Acquisti

    42/73

    et) $rivacy trade'o((s

    # Protect)

    + I""ediate costs or loss o( i""ediate %ene(its

    + uture =uncertain@ %ene(its

    # :o not $rotect)+ I""ediate %ene(its

    + uture =uncertain@ costs

  • 8/12/2019 Bh Us 04 Acquisti

    43/73

    7hy is this $ro%le"aticK

    # Inco"$lete in(or"ation

    # Bounded rationality

    # Psychological*%ehavioral distortions

    + Co"$lacency to!ards large risEs

    + Ina%ility to deal !ith $rolonged accu"ulation o( s"allrisEs

    + Coherent ar%itrariness+ Hy$er%olic discounting

    # 0heory: +cuisti +2' E2 64

    # Empirical approach: +cuisti and Grosslags WEIS 64

  • 8/12/2019 Bh Us 04 Acquisti

    44/73

    I""ediate grati(ication&

  • 8/12/2019 Bh Us 04 Acquisti

    45/73

    Hy$er%olic discounting

    S ti

  • 8/12/2019 Bh Us 04 Acquisti

    46/73

    Survey ti"evs. decision ti"e

    Ti i t

  • 8/12/2019 Bh Us 04 Acquisti

    47/73

    Ti"e consistencyvs. ti"e inconsistency

    S hi ti t d

  • 8/12/2019 Bh Us 04 Acquisti

    48/73

    So$histicatedvs. nave

  • 8/12/2019 Bh Us 04 Acquisti

    49/73

    Consequences

    # 4ationality "odel not a$$ro$riate to descri%e individual$rivacy %ehavior

    # Ti"e inconsistencies lead to under $rotection and

    over release o( $ersonal in(or"ation# Genuinely $rivacy concerned individuals "ay end u$

    not $rotecting their $rivacy

    # Also so$histicated users !ill not $rotect the"selves

    against risEs# 2arge risEs accu"ulate through s"all ste$s

    # Fot Eno!ing the risE is notthe issue

  • 8/12/2019 Bh Us 04 Acquisti

    50/73

    Survey and e5$eri"ent

    # Phase 0ne) $ilot

    # Phase T!o) V-DD questions, -- su%ects (ro" CMU list

    # Paid, online survey =CMU BerE"an und@

    # Goals+ Contrast three sets o( data

    # Privacy attitudes

    # Privacy !ehavior

    # 'aret characteristics and psychological distortions

    + Test rationality assu"$tion

    + 5$lain %ehavior and dichoto"y

    # Phase Three) e5$eri"ent

  • 8/12/2019 Bh Us 04 Acquisti

    51/73

    1uestions

    -. :e"ogra$hics and IT usage

    /. no!ledge o( $rivacy risEs

    3. no!ledge o( $rotection

    . Attitudes to!ards $rivacy =generic@

    . Attitudes to!ards $rivacy =s$eci(ic@

    ?. 4isE neutrality*aversion =un(ra"ed@

    >. Strategic*unstrategic %ehavior =un(ra"ed@

    . Hy$er%olic discounting =un(ra"ed@

    . Buy and sell value (or sa"e $iece o( in(or"ation

    -D. Behavior, $ast) 6Sell; %ehavior =i.e., give a!ay in(or"ation@

    --. Behavior, $ast) 6Buy; %ehavior =i.e., $rotect in(or"ation@

  • 8/12/2019 Bh Us 04 Acquisti

    52/73

    :e"ogra$hics

    # Age) -' =average) /@

    # ducation) "ostly college educated

    # Household inco"e) (ro" W-E to -/DEX# Fationalities) USA 3R

    #

  • 8/12/2019 Bh Us 04 Acquisti

    53/73

    Privacy attitudes=e5cer$ts@

    How important is privacy to you?

    1 - Veryimportant

    73 (60.33%)

    2 31 (25.62%)

    3 (7.!!%)! - "ome#owimportant

    5 (!.13%)

    5 2 (1.65%)

    6 1 (0.$3%)

    7 - otimportant at a&&

    0 (0.00%)

    P i ttit d

  • 8/12/2019 Bh Us 04 Acquisti

    54/73

    Privacy attitudes=e5cer$ts@

    'o you t#in you #ave enou# privacy in to*ay+ssociety?

    ,es 32 (26.$%)

    o $7 (73.11%)

    How concerne* are you aout t#reats to your persona&privacy in to*ays in/ormation society?

    1 - Very muc# !! (36.36%)

    2 21 (17.36%)

    3 2! (1.$3%)

    ! - "ome#ow 1 (15.70%)5 10 ($.26%)

    6 2 (1.65%)

    7 - ot at a&& 1 (0.$3%)

    P i ttit d

  • 8/12/2019 Bh Us 04 Acquisti

    55/73

    Privacy attitudes=e5cer$ts@

    Has your concern aout t#reats to your persona&

    privacy c#ane* in t#e &ast 2! mont#s?

    1 - uc# more

    concerne*31 (25.62%)

    2 22 (1$.1$%)3 26 (21.!%)

    ! - o c#anes !1 (33.$$%)

    5 1 (0.$3%)

    6 0 (0.00%)

    7 - uc# &ess

    concerne* 0 (0.00%)

    l d ( i i E

  • 8/12/2019 Bh Us 04 Acquisti

    56/73

    no!ledge o( $rivacy risEs=e5cer$ts@

    #en you are re&easin persona& in/ormation *urin anecommerce transaction #ow &ie&y *o you consi*er t#e

    /o&&owin outcomes?

    ttempts to vary price *urin your ne4t purc#ase ase* onyour co&&ecte* *ata

    1 - Very &ie&y 16 (13.22%)

    2 - uite &ie&y 16 (13.22%)

    3 - "omew#at&ie&y

    31 (25.62%)

    ! - it un&ie&y 3! (2$.10%)

    5 - Very un&ie&y 1$ (1!.$$%)

    #ave no i*ea 6 (!.6%)

    se /or maretin purposes (e.. a*vertisin emai&s)

    1 - Very &ie&y $2 (67.77%)

    2 - uite &ie&y 1 (15.70%)

    3 - "omew#at&ie&y

    13 (10.7!%)

    ! - it un&ie&y 3 (2.!$%)

    5 - Very un&ie&y 2 (1.65%)

    l d ( i i E

  • 8/12/2019 Bh Us 04 Acquisti

    57/73

    no!ledge o( $rivacy risEs=e5cer$ts@

    How &ie&y *o you consi*er t#e possii&ity t#at a 3r* party canmonitor some *etai&s o/ t#e /o&&owin activities you may enae

    in?

    sin a /i&e s#arin c&ient (e.. 8a9aa)

    1 - Very &ie&y 70 (57.$5%)

    2 - uite &ie&y 22 (1$.1$%)

    3 - "omew#at &ie&y 12 (.2%)

    ! - it un&ie&y 7 (5.7%)

    5 - Very un&ie&y 6 (!.6%)

    #ave no i*ea ! (3.31%)

    ritin a te4t memo to yourse&/ on a computer connecte* to t#e

    nternet in your orani9ation

    1 - Very &ie&y 21 (17.36%)

    2 - uite &ie&y 15 (12.!0%)

    3 - "omew#at &ie&y 26 (21.!%)

    ! - it un&ie&y 3! (2$.10%)

    5 - Very un&ie&y 20 (16.53%) #ave no i*ea 5 !.13%

    l d ( i i E

  • 8/12/2019 Bh Us 04 Acquisti

    58/73

    no!ledge o( $rivacy risEs=e5cer$ts@

    'o you now w#at :c#e&on is?

    ,es 15 (12.50%)

    o 105 ($7.50%)

    'o you now w#at ;arnivore is?

    ,es 32 (26.$%)

    o $7 (73.11%)

    'o you now w#at

  • 8/12/2019 Bh Us 04 Acquisti

    59/73

    no!ledge o( $rivacy risEs=e5cer$ts@

    ,ou #ave comp&ete* a cre*it car*

    purc#ase wit# an on&ine merc#ant.

    =esi*es you an* t#e merc#antwesite w#o #as *ata aoutpartso/

    your transaction?

    oo*y> 36.!%;re*it car* company> 1$.7%Hacers> 15%

    Nobody, assuming an SSL transaction, withoutwhich I would not commit an online transaction

    using my credit card

    Privacy Eno!ledge and

  • 8/12/2019 Bh Us 04 Acquisti

    60/73

    Privacy Eno!ledge andovercon(idence =e5cer$ts@

    Can you estimate an interval for which you are95% sure that it contains the number thatcorrectly answers the following questions?

    Example: Occurrences of identity theft in the US in 2003

    Solution: lower bound 0.5 illion !complaints with "#$%& less

    conser'ati'e estimates: (0 illion

    Rational Overconfident Missing3!9% 5"!3% #!9%

  • 8/12/2019 Bh Us 04 Acquisti

    61/73

  • 8/12/2019 Bh Us 04 Acquisti

    62/73

    no ledge o( $ri ac $rotection

  • 8/12/2019 Bh Us 04 Acquisti

    63/73

    no!ledge o( $rivacy $rotection=e5cer$ts@

    # Privacy la!)

    + 54F cannot uote a law or descri!e it

    # 0C: air in(or"ation $rinci$les)

    + HF !elieve they include *litigation against wrongful !ehavior*

    # Goal) %ro!se anony"ously

    + 59F would not now how

    # Goal) %ro!se the Internet !ith !arnings i( a

    !e%site has an inco"$ati%le $rivacy $olicy

    + JF would not now how 7!ut most use IE

  • 8/12/2019 Bh Us 04 Acquisti

    64/73

  • 8/12/2019 Bh Us 04 Acquisti

    65/73

    6Buy; %ehavior

    # >R ado$ted so"e strategyor technologyorother!ise tooE so"e $articular actionto $rotecttheir $rivacy

    + ncry$tion, PGP+ :o'not'call list

    + Interru$t $urchase

    + Provide (aEe in(or"ation

    + 8&9# Ho!ever, !hen you looE at details, $ercentages go

    do!n&+ R encry$t e"ails regularly

    + Si"ilar results (or shredders, do'not'call lists, caller'I:s, etc.

  • 8/12/2019 Bh Us 04 Acquisti

    66/73

    6Sell; %ehavior

    S =in decreasing order@)

    # ull na"e

    # "ail address

    # Ho"e address

    # Phone nu"%er

    #

  • 8/12/2019 Bh Us 04 Acquisti

    67/73

    Attitudes*%ehavior dichoto"y=e5cer$ts@

    Have a

    &oya&tycar* ave

    correct in/o

    Have acar*

    ave/ae

    in/o

    'on+t#ave a

    car*Cow concern #!##% "!$#% "!$#%

    e*ium concern "!$#% 3!3#% #!##%Hi# concern "!$#% 3!3#% #!##%

    4ecall o( $ast %ehavior

  • 8/12/2019 Bh Us 04 Acquisti

    68/73

    4ecall o( $ast %ehavior=e5cer$ts@

    Have a&oya&ty

    car* avecorrect

    in/o

    Have acar*ave/ae

    in/o

    'on+t#ave a

    car*,es #ave iveni*entity *ata #!##% #!##% #!##%o #ave not iveni*entity *ata "!$#% "!##% 3!3#%

  • 8/12/2019 Bh Us 04 Acquisti

    69/73

  • 8/12/2019 Bh Us 04 Acquisti

    70/73

  • 8/12/2019 Bh Us 04 Acquisti

    71/73

    6Buy; vs. 6sell; $rice

    s Dse&&D price #i#er or &ower t#ane4pecte* &oss?

    (ell ) e*+ected loss $!'3%

    ,*+ected loss ) sell $!5"%

    Missing !#%

    s DuyD price #i#er or &ower t#ane4pecte* &oss?

    -uy ) e*+ected loss 39!5#%

    ,*+ected loss ) -uy 3"!3%

    Missing '!3$%

    So !ho should $rotect your

  • 8/12/2019 Bh Us 04 Acquisti

    72/73

    So... !ho should $rotect your$rivacyK

    'o you t#in t#at privacy s#ou&* e protecte* y>

    Iovernment(t#rou#&eis&ation)

    65 (53.72%)

    :ac# user y#erse&/

    (t#rou#tec#no&oy)

    1$ (1!.$$%)

    ;ompanies an*in*ustry(t#rou# se&/-reu&ation)

    1 (0.$3%)

    :veryo*y(warrante*

    natura&&yt#rou#e#aviora&norms)

    37 (30.5$%)

    oo*y (s#ou&*not eespecia&&yprotecte*)

    0 (0.00%)

  • 8/12/2019 Bh Us 04 Acquisti

    73/73

    Assorted conclusions

    # Theory+ Ti"e inconsistencies "ay lead to under'$rotection and over'release

    o( $ersonal in(or"ation

    + Genuinely $rivacy concerned individuals "ay end u$ not $rotectingtheir $rivacy

    # vidence+ vidence o( overcon(idence, incorrect assess"ent o( o!n %ehavior,

    inco"$lete in(or"ation a%out risEs and $rotection, %uy*selldichoto"y

    + 4ationality "odel not a$$ro$riate to descri%e individual $rivacy

    %ehavior# I"$lications+ Privacy easier to $rotect than to sell

    + Sel('regulation alone, or reliance on technology and userres$onsi%ility alone, !ill not!orE