Privacy Harms and the Effectiveness of the Notice and Choice Framework

32 Pages Posted: 31 Mar 2014 Last revised: 26 Jul 2015

See all articles by Joel R. Reidenberg

Joel R. Reidenberg

Fordham University School of Law

N. Cameron Russell

Fordham Center on Law and Information Policy (CLIP)

Alexander Callen

Fordham University

Sophia Qasir

Fordham Center on Law and Information Policy (CLIP)

Thomas Norton

Fordham Center on Law and Information Policy (CLIP)

Date Written: March 29, 2014

Abstract

In the last fifteen years, the Federal Trade Commission and the White House have promoted notice and choice as the preferred mechanism for protecting consumers’ privacy online. But law and policy scholars doubt the efficacy of this mechanism. Research shows that consumers rarely read website privacy policies, that such policies are often too complex for users to understand, and that website policy statements do not match consumers’ privacy expectations. Efforts to ameliorate theses issues through technological tools, such as privacy filters and do-not-track codes, have been unsuccessful. Further, these tools do not address whether notice and choice theory aligns with the actual privacy harms that consumers experience.

This alignment remains unexplored. This article, thus, proposes to examine the relationship between the notice and choice theory and users’ actual privacy concerns. The article takes a novel approach that examines privacy litigation and FTC enforcement actions. This focus on the wrongs litigated in the real world reveals the most important harms that consumers experience and provides a better understanding of the efficacy of the notice and choice framework.

The data set compiled to support the research for the article consists of all federal class action complaints alleging online privacy violations filed during the last ten years and the Federal Trade Commission complaints and settlements addressing online privacy. The article next addresses the roles that jurisdiction and competence play in framing claims and identifies a typology of the wrongful acts experienced by consumers. The research shows that four types of claims appear in both private litigation and public enforcement with respect to personal information: (1) unauthorized disclosure, (2) surreptitious collection, (3) failure to secure, and (4) undue retention.

The article then applies this typology to map “zones of effectiveness” for the notice and choice regime. The article identifies which wrongs a proper notice and choice regime can and cannot address. The research demonstrates that while some wrongful practices might be avoided by the inclusion of specific statements in a notice, others will be incurable through notice. The latter set of wrongs is, thus, outside the “zone of effectiveness” of a notice and choice regime. Lastly, the article concludes with a discussion of whether and how the harms that consumers experience match the outcomes of litigation and FTC settlement orders.

This research is supported by the National Science Foundation grant 1330214 “TWC SBE: Option: Frontier: Collaborative: Towards Effective Web Privacy Notice and Choice: A Multi-Disciplinary Prospective.”

Keywords: privacy, class action, website policy, Federal Trade Commission, settlements

Suggested Citation

Reidenberg, Joel R. and Russell, N. Cameron and Callen, Alexander and Qasir, Sophia and Norton, Thomas, Privacy Harms and the Effectiveness of the Notice and Choice Framework (March 29, 2014). 2014 TPRC Conference Paper, Fordham Law Legal Studies Research Paper No. 2418247, Available at SSRN: https://ssrn.com/abstract=2418247 or http://dx.doi.org/10.2139/ssrn.2418247

Joel R. Reidenberg (Contact Author)

Fordham University School of Law ( email )

140 West 62nd Street
New York, NY 10023
United States
212-636-6843 (Phone)
212-930-8833 (Fax)

HOME PAGE: http://faculty.fordham.edu/reidenberg

N. Cameron Russell

Fordham Center on Law and Information Policy (CLIP) ( email )

Fordham Law School
140 West 62nd Street
New York, NY 10023
United States
212-930-8878 (Phone)

Alexander Callen

Fordham University ( email )

113 West 60th Street
New York, NY 10023
United States

Sophia Qasir

Fordham Center on Law and Information Policy (CLIP) ( email )

Fordham Law School
140 West 62nd Street
New York, NY 10023
United States

Thomas Norton

Fordham Center on Law and Information Policy (CLIP)

Fordham Law School
140 West 62nd Street
New York, NY 10023
United States

Do you have negative results from your research you’d like to share?

Paper statistics

Downloads
499
Abstract Views
3,374
Rank
104,309
PlumX Metrics