What Californians Understand about Privacy Online

33 Pages Posted: 3 Sep 2008

See all articles by Chris Jay Hoofnagle

Chris Jay Hoofnagle

University of California, Berkeley - School of Law; University of California, Berkeley - School of Information

Jennifer King

Stanford Institute for Human-Centered Artificial Intelligence; Center for Internet and Society, Stanford Law School; University of California, Berkeley - School of Information

Date Written: September 3, 2008

Abstract

The volume of online commerce grows every year, in absence of a federal law setting baseline protections for the collection, use, and disclosure of personal information. Instead, information collected by websites are governed by individual privacy policies.

In order to gauge Californians' understanding of privacy policies and default rules in the online environment, we commissioned a representative survey of adults in the State (N=991). The telephonic survey of Spanish and English speakers was conducted by the Survey Research Center of University of California, Berkeley.

A gulf exists between California consumers' understanding of online rules and common business practices. For instance, Californians who shop online believe that privacy policies prohibit third-party information sharing. A majority of Californians believes that privacy policies create the right to require a website to delete personal information upon request, a general right to sue for damages, a right to be informed of security breaches, a right to assistance if identity theft occurs, and a right to access and correct data.

These findings show that California consumers overvalue the mere fact that a website has a privacy policy, and assume that websites carrying the label have strong, default rules to protect personal data. In a way, consumers interpret "privacy policy" as a quality seal that denotes adherence to some set of standards. Website operators have little incentive to correct this misperception, thus limiting the ability of the market to produce outcomes consistent with consumers' expectations. Drawing upon earlier work, we conclude that because the term "privacy policy" has taken on a specific meaning in the minds of consumers, its use should be limited to contexts where businesses provide a set of protections that meet consumers' expectations.

Keywords: Privacy, market, self-regulation, consumer protection, profiling, opt-in, opt-out

JEL Classification: D12, D18

Suggested Citation

Hoofnagle, Chris Jay and King, Jennifer, What Californians Understand about Privacy Online (September 3, 2008). Available at SSRN: https://ssrn.com/abstract=1262130 or http://dx.doi.org/10.2139/ssrn.1262130

Chris Jay Hoofnagle (Contact Author)

University of California, Berkeley - School of Law ( email )

341 Berkeley Law Building
Berkeley, CA 94720-7200
United States
‭(510) 666-3783‬ (Phone)

HOME PAGE: http://hoofnagle.berkeley.edu

University of California, Berkeley - School of Information ( email )

212 South Hall
Berkeley, CA 94720-4600
United States
510-643-0213 (Phone)

HOME PAGE: http://hoofnagle.berkeley.edu

Jennifer King

Stanford Institute for Human-Centered Artificial Intelligence ( email )

210 Panama St.
Cordura Hall
Stanford, CA 94305
United States

HOME PAGE: http://https://hai.stanford.edu/people/jennifer-king

Center for Internet and Society, Stanford Law School

559 Nathan Abbott Way
Stanford, CA 94305-8610
United States

HOME PAGE: http://https://cyberlaw.stanford.edu/about/people/jen-king

University of California, Berkeley - School of Information ( email )

102 South Hall
Berkeley, CA 94720
United States

Do you have negative results from your research you’d like to share?

Paper statistics

Downloads
664
Abstract Views
12,032
Rank
72,596
PlumX Metrics