More regulations make websites less trustworthy, study shows

Aug 02, 2006

Placing strict controls and regulations on website operators does not make the Internet more secure and private for users, according to a new study. In fact, stringent policies seem to make the matter worse, says Dr. Karim Jamal, a professor in the University of Alberta School of Business.

At issue is the practice of requiring web surfers to submit personal information in order to conduct online transactions. Web proprietors can then track the users' online activities and tailor marketing strategies - including e-mail campaigns - that target the people who come to their sites. Sometimes they'll even sell the information to third parties, who stuff unsuspecting surfers' e-mail boxes with unwanted marketing messages.

"Let's put it this way," Jamal said. "We've found that there are some reputable and highly used sites that you will come to regret ever registering for or doing business on."

Jamal's research involved an analysis of the top 100 business websites in the United States before the recently passed laws to regulate the tracking and selling of information had taken effect. Working with a colleague, Dr. Norman Bowie of the University of Minnesota, Jamal then compared the U.S. results with the results of an analysis of the top business sites in the U.K., where a large government bureaucracy regulates and monitors the actions of online operators.

Using specialized software, they were able to navigate through the sites and learn whether or not the site operators were tracking their activities. Then, over a period of six months, the researchers sat back and monitored how each of the companies used information related to their online activities. Finally, the researchers checked each site for disclosure information and then cross-referenced what they found - or didn't find - with the results of their software analysis.

"We found that the unregulated websites in the U.S. function just as securely and privately as the regulated sites in the U.K. Most of the web operators in the U.S. and the U.K. were open and honest and did a good job of protecting user information," Jamal said.

"However, we also found that a small percentage of operators in both countries were cheaters, and the worst of the worst of the sites operated in the U.K," added Jamal, who co-authored a paper on this topic that was recently published in the journal Business Ethics Quarterly.

The researchers also found that U.K. operators weren't as forthcoming as their U.S. counterparts in disclosing how their sites operated and what they were doing with the information they were gathering.

"You could tell the guys who were operating in the regulated market only disclosed what they were told they had to by law. Even then, what they wrote was mostly unreadable legalese," Jamal said.

"In the regulated system, the people who cheat will cheat big. They won't sell your information to a few people, they'll sell it to thousands of people," he said. "I guess they figure if they're going to cheat they might as well make it worth their while."

Jamal added that the highly regulated U.K. system, which is similar to the system used throughout Europe, costs taxpayers a lot of money, even though it isn't effective.

Based on this evidence, Jamal believes the best system to protect web users is a self-regulated one, such as the one in the U.S., where operators rely on word of mouth and seals of approval from organizations such as the Better Business Bureau to promote their clean practices.

Canada's system falls somewhere in between the U.S. and the U.K./Euro systems, Jamal said.

An expert in accounting and auditing ethics, Jamal initiated the online privacy study because the web, being relatively new, provides good testing grounds to measure the effect of regulatory policies. Trying to accomplish the same feat in the older, convoluted world of accounting is extremely difficult, he said.

His ultimate goal is to provide insights to help policy-makers improve accounting systems so that disasters such as the Enron and WorldCom collapses become less likely.

"I think people who deal in accounting are a lot like the operators on the web. Most are honest, some are cheaters and you have to develop a system that evolves gradually to make it harder for the cheaters to operate. What you don't want is for the system to be hi-jacked to only focus on the cheaters," Jamal said.

"Our research is showing us that relying on strict regulations and harsh, punitive laws only costs more to implement, creates complexity and confusion and leads to more extreme cases of cheating," he added.

Source: By Ryan Smith, University of Alberta

Explore further: LinkedIn membership hits 300 million

add to favorites email to friend print save as pdf

Related Stories

Health care site flagged in Heartbleed review

7 hours ago

People with accounts on the enrollment website for President Barack Obama's signature health care law are being told to change their passwords following an administration-wide review of the government's vulnerability to the ...

Airbnb rental site raises $450 mn

7 hours ago

Online lodging listings website Airbnb inked a $450 million funding deal with investors led by TPG, a source close to the matter said Friday.

Four questions about missing Malaysian plane answered

7 hours ago

Travelers at Asian airports have asked questions about the March 8 disappearance of Malaysia Airlines Flight 370 while en route from Kuala Lumpur to Beijing. Here are some of them, followed by answers.

Recommended for you

LinkedIn membership hits 300 million

23 hours ago

The career-focused social network LinkedIn announced Friday it has 300 million members, with more than half the total outside the United States.

Researchers uncover likely creator of Bitcoin

Apr 18, 2014

The primary author of the celebrated Bitcoin paper, and therefore probable creator of Bitcoin, is most likely Nick Szabo, a blogger and former George Washington University law professor, according to students ...

White House updating online privacy policy

Apr 18, 2014

A new Obama administration privacy policy out Friday explains how the government will gather the user data of online visitors to WhiteHouse.gov, mobile apps and social media sites. It also clarifies that ...

User comments : 0

More news stories

Airbnb rental site raises $450 mn

Online lodging listings website Airbnb inked a $450 million funding deal with investors led by TPG, a source close to the matter said Friday.

Health care site flagged in Heartbleed review

People with accounts on the enrollment website for President Barack Obama's signature health care law are being told to change their passwords following an administration-wide review of the government's vulnerability to the ...