Individuals may fail to navigate complex tradeoffs in privacy decision-making

January 29, 2015, Carnegie Mellon University
Credit: Wikipedia

We leave a trail of data, both knowingly and unwittingly, with every swipe of a credit card, post on social media and query on a search engine.

Carnegie Mellon University researchers detail the hurdles people face while navigating in the information age, and what should be done about privacy at a policy level, in a review published in the Jan. 30 special issue of the journal Science.

The review challenges a number of claims that have become common in the ongoing debate over privacy, including the claim that privacy may be an historical anomaly, or that people do not really care for data protection.

"Privacy is not a modern invention, but a historically universal need," said lead author Alessandro Acquisti, professor of and public policy at CMU's H. John Heinz III College. "In certain situations, will care for privacy quite a lot and act to protect it, but advances in technology and the acceleration of data collection challenge our ability to make self-interested decisions in the face of increasingly complex tradeoffs."

Acquisti, along with CMU's Laura Brandimarte and George Loewenstein, identify three themes prevalent in empirical research on privacy decisions and behavior:

  • People are often uncertain about the consequences of privacy-related behaviors and their own preferences over these consequences;
  • People's concern, or lack thereof, about privacy is context dependent;
  • Privacy concerns are malleable, particularly by commercial and government influences.

People rarely know what information other individuals, organizations and governments have about them and how that information is used. Individuals may be aware of some of the consequences of privacy breaches, such as the costs of identity theft, but in other situations, such as sharing a family milestone online, the costs may be intangible. They also are likely to be uncertain about their own privacy preferences.

The researchers note that context dependence plays a major role in privacy decision-making, but that many of the cues that determine people's behavior provide a crude or even misleading guide to the costs and benefits of revelation or concealment. For example, email feels more anonymous than talking face-to-face, even though email leaves an indelible record of the conversation.

Privacy concerns are also malleable. People are easily influenced by outside forces, such as commercial or government interests, in what and how much they disclose. For example, default privacy options on websites are often accepted by users only because they seem more convenient or are perceived as implicitly recommended. Studies covered in the review also found that websites can employ so-called "malicious design" features that confuse users into disclosing personal information. Another study covered in the review found that individuals who were given more granular control over sharing options on a social network site ended up sharing more publicly than those not given such control—exactly the opposite of the pattern that control is intended to produce.

"Although control is the cornerstone of most policies designed to protect privacy, giving people more control increases trust and leads individuals to lower their guard and disclose more," said Brandimarte, a postdoctoral fellow at CMU's Heinz College.

Insights the team gathered from social and behavior research suggest that policy approaches that rely solely on informing individuals of privacy risks posed by information technologies are inadequate. Rather, effective policies should rely on minimal requirement of informed or rational decision making. Most importantly, policies should focus on achieving a greater balance of power between individuals and data holders such as governments and corporations.

"People cannot always be counted upon to navigate the complex tradeoffs involving privacy in a self-interested fashion," said Loewenstein, the Herbert A. Simon University Professor of Economics and Psychology at CMU's Dietrich College of Humanities and Social Sciences. "They may need assistance, and even protection, to balance what is at present a very uneven playing field."

Explore further: Researcher is developing online tools to help users adopt better privacy practices

More information: "Privacy and human behavior in the age of information," Science, … 1126/science.aaa1465

Related Stories

Facebook rolls out 'privacy checkup'

September 5, 2014

Facebook on Thursday began rolling out its "privacy checkup" aimed at helping users of the huge social network better manage sharing their information and postings.

Four myths about privacy

May 1, 2014

( —Many privacy discussions follow a similar pattern, and involve the same kinds of arguments. It's commonplace to hear that privacy is dead, that people—especially kids—don't care about privacy, that people ...

Reading privacy policy lowers trust

May 20, 2014

Website privacy policies are almost obligatory for many online services, but for anyone who reads these often unwieldy documents, trust in the provider is more commonly reduced than gained, according to US researchers.

Recommended for you

The powerful meteor that no one saw (except satellites)

March 19, 2019

At precisely 11:48 am on December 18, 2018, a large space rock heading straight for Earth at a speed of 19 miles per second exploded into a vast ball of fire as it entered the atmosphere, 15.9 miles above the Bering Sea.

OSIRIS-REx reveals asteroid Bennu has big surprises

March 19, 2019

A NASA spacecraft that will return a sample of a near-Earth asteroid named Bennu to Earth in 2023 made the first-ever close-up observations of particle plumes erupting from an asteroid's surface. Bennu also revealed itself ...

Nanoscale Lamb wave-driven motors in nonliquid environments

March 19, 2019

Light driven movement is challenging in nonliquid environments as micro-sized objects can experience strong dry adhesion to contact surfaces and resist movement. In a recent study, Jinsheng Lu and co-workers at the College ...

Revealing the rules behind virus scaffold construction

March 19, 2019

A team of researchers including Northwestern Engineering faculty has expanded the understanding of how virus shells self-assemble, an important step toward developing techniques that use viruses as vehicles to deliver targeted ...

1 comment

Adjust slider to filter visible comments by rank

Display comments: newest first

not rated yet Jan 31, 2015
"Power"--its what privacy is about. Its what gets traded-off--since the better your privacy the less others can have power over you. But that word is missing from the above in spite of talking about "complex tradeoffs".

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.