What Californians Understand about Privacy Online

33 Pages Posted: 3 Sep 2008  

Chris Jay Hoofnagle

University of California, Berkeley - School of Information; University of California, Berkeley - School of Law

Jennifer King

University of California, Berkeley - School of Information

Date Written: September 3, 2008

Abstract

The volume of online commerce grows every year, in absence of a federal law setting baseline protections for the collection, use, and disclosure of personal information. Instead, information collected by websites are governed by individual privacy policies.

In order to gauge Californians' understanding of privacy policies and default rules in the online environment, we commissioned a representative survey of adults in the State (N=991). The telephonic survey of Spanish and English speakers was conducted by the Survey Research Center of University of California, Berkeley.

A gulf exists between California consumers' understanding of online rules and common business practices. For instance, Californians who shop online believe that privacy policies prohibit third-party information sharing. A majority of Californians believes that privacy policies create the right to require a website to delete personal information upon request, a general right to sue for damages, a right to be informed of security breaches, a right to assistance if identity theft occurs, and a right to access and correct data.

These findings show that California consumers overvalue the mere fact that a website has a privacy policy, and assume that websites carrying the label have strong, default rules to protect personal data. In a way, consumers interpret "privacy policy" as a quality seal that denotes adherence to some set of standards. Website operators have little incentive to correct this misperception, thus limiting the ability of the market to produce outcomes consistent with consumers' expectations. Drawing upon earlier work, we conclude that because the term "privacy policy" has taken on a specific meaning in the minds of consumers, its use should be limited to contexts where businesses provide a set of protections that meet consumers' expectations.

Keywords: Privacy, market, self-regulation, consumer protection, profiling, opt-in, opt-out

JEL Classification: D12, D18

Suggested Citation

Hoofnagle, Chris Jay and King, Jennifer, What Californians Understand about Privacy Online (September 3, 2008). Available at SSRN: https://ssrn.com/abstract=1262130 or http://dx.doi.org/10.2139/ssrn.1262130

Chris Jay Hoofnagle (Contact Author)

University of California, Berkeley - School of Information ( email )

212 South Hall
Berkeley, CA 94720-4600
United States
510-643-0213 (Phone)

HOME PAGE: http://hoofnagle.berkeley.edu

University of California, Berkeley - School of Law ( email )

344 Boalt Hall
Berkeley, CA 94720-7200
United States
510-643-0213 (Phone)

HOME PAGE: http://hoofnagle.berkeley.edu

Jennifer King

University of California, Berkeley - School of Information ( email )

102 South Hall
Berkeley, CA 94720
United States

Paper statistics

Downloads
507
Rank
43,775
Abstract Views
6,969