Online Shoppers are Willing to Pay More for Privacy

Caroline Matische writes "People are willing to pay more to buy items from online retailers who make their privacy policies clear, a new Carnegie Mellon University study showed. People were more likely to buy from online merchants with good privacy policies and were also willing to pay about 60 cents extra on a $15 purchase when buying from a site with a privacy policy they liked."

Why privacy matters...

Privacy is central to our dignity and our basic human rights. Privacy ensures and protects our rights to free assembly and free speech, especially in areas where the governments would seek to curtail these rights. The right to privacy ensures our autonomy in the world and in our affairs. Think of your information as a gift you give to agencies and people you trust. How do you feel when any gift you give is "regifted." How do you feel when something you say in confidence is repeated and spread through your community, whether that is your office of group of friends. How would you feel if a friend gave your phone number out to every person who asked them. How would you feel if a friend revealed an embarrassing medical condition you had or a financial problem you were struggling with. Thinking of privacy in these terms helps you to see why your privacy is an important part of your life.

Re:

And in other news, water is wet, ice is cold, violets are blue, bears are Catholic and the Pope poops in the woods.

Re:Why privacy matters...

Mod parent up for reinforcing his point by posting anonymously.

Why copyright matters:

http://www.cpsr.org/issues/privacy/whyPrivacy [cpsr.org]

Re:Why privacy matters...

"At what point does the intrinsic need for privacy override the need to prevent societal decay? "

Privacy has a lot of grey area to it, and I think different places in that grey area are appropriate in different circumstances. Sexual predators might need to be known to the local police and school officials, but not the media. Politicians' campaign donations need to be known to the media, but are not of special concern to local police. The trick is who gets to decide, what info is databased and shared. If someone goes to the doctor for an STD medication, should that info be attached to their online dating profile? If someone is in Alcoholics Anonymous, should their children's teacher be informed?
There is a difference between allowing someone's reputation to follow them, and having institutionalzed gossip. But it's a tough call as to exactly where that difference lies. http://yro.slashdot.org/comments.pl?sid=237213&cid =19375351 [slashdot.org]

Re:

A line must be drawn, however, when it comes to fighting and eliminating crime. Individuals who rape children deserve no privacy. Individuals who sell drugs deserve no privacy. Disgusting politicians who accept dirty money for their campaigns deserve no pr

Ridiculuous

That's ridiculous. Users should expect, no, demand privacy, not have to pay for it. Privacy should already be there, because the user has to trust the company to handle their data correctly.

I won't trust a company that makes people pay for "extra privacy." That screams distrust to me.

Re:

You know, that was my initial reaction too. However, I don't think that's the notion that's conveyed by the study -- I'd like to think that it means merchants who protect privacy to begin with are rewarded for it. Unfortunately, I do suspect that this will

Re:

Or, to come at it from another angle, how much can I discount my prices in exchange for selling customer's information with their consent? Customers want to pay less for things, so how much are they willing to trade to pay less for a gallon of milk? How

Re:

In a perfect world, you are right, all online retailers should protect our privacy.

However, in the real world..there are a lot of shady outlets which either haven't bothered to make their privacy policy clear or don't respect the privacy of their customers

Re:

However, in the real world..there are a lot of shady outlets which either haven't bothered to make their privacy policy clear or don't respect the privacy of their customers.

It really dosn't matter if the policy is clear or not. If someone is a crook the

Re:

That's ridiculous. Users should expect, no, demand privacy, not have to pay for it. Privacy should already be there, because the user has to trust the company to handle their data correctly.

You mean, people should be more willing to buy at all from a compa

Re:

I'm sorry, but personal data is worth money. So, inherently, the bad companies make more money, even if they sell a little less. This can keep their price down. Of course, I won't buy from them, and I find that good quality service is more or less linear w

Re:Ridiculuous

It's not that good companies charge more. It's that bad companies charge less, because they have no obligation not to use that information to turn an additional profit.

Re:

Welcome to the real world. Most of the companies that provide "free" services to you online only do so because they're getting your personal information which can be resold. Few people are aware of this. For instance, American Express is rated as one of

Re:

I won't trust a company that makes people pay for "extra privacy." That screams distrust to me.

Did you read anything other than the headline? The summary even mentions that people are more willing to buy from a company that makes their privacy policy cle

Advantages of B&M retailers

I just say, I'm going to use my Ben Franklin Card today. If the store clerk then asks for my phone number or email address, I just remind them of the airtight Ben Franklin Card privacy policy.

Re:

I just say, I'm going to use my Ben Franklin Card today. If the store clerk then asks for my phone number or email address, I just remind them of the airtight Ben Franklin Card privacy policy.

While this is true, I bet if you walk up to the counter wearing

Newsflash:

People look for the "shipped in plain brown packages" when buying porn related items.

Privacy is temporary, no?

Isn't the notion of a "company respecting user privacy" illusory? In other words, when you give your private information away, you're not giving it to another person. You're giving it to a corporation. If the management changes, if the shareholders dema

Privacy is not always temporary

It varies, depending on to whom you give your information.

In most of Europe, companies are bound by laws implementing the EU's Data Protection Directive, which makes it clear that your data is not just another asset of the company which collects it, and that companies can only process it for the purposes for which you gave them the data.

In the US, companies howl with outrage at the prospect that they should treat their customers with similar fairness. You could argue that resisting even the smallest extra expense is in the short term interests of their shareholders. Of course that ignore the possibility that ethical policies may increase customer loyalty, and better serve their shareholders' longer term interests - as well as being "The Right Thing".

There is a lot of nonsense spoken about "impersonal corporations". Folk forget that it's actual human beings who make the "decisions of the corporation". Some of those people do good and some do evil.

Maybe they should be held to account?

Re:

There is a lot of nonsense spoken about "impersonal corporations". Folk forget that it's actual human beings who make the "decisions of the corporation". Some of those people do good and some do evil.

Maybe they should be held to account?

That's a laugh. The whole point of incorporation is to shield the owners and the management from legal liability. Add in the factor of diffusion of responsibility - the bigger the company, the less direct personal responsibility any one employee has for

Re:

The whole point of incorporation is to shield the owners and the management from legal liability.

Actually the original idea behind a Limited Liability Corporation was only to shield the owners from creditors if the business failed. Their liability being

Re:

In the US, companies howl with outrage at the prospect that they should treat their customers with similar fairness. You could argue that resisting even the smallest extra expense is in the short term interests of their shareholders. Of course that ignore

Re:

The Data Protection directive does not take away your right to flush your privacy down the crapper. It simply means that a company cannot go back on it's word, it can only use your data in the way it originally tells you. So if they are going to sell it

Re:

In most of Europe, companies are bound by laws implementing the EU's Data Protection Directive, which makes it clear that your data is not just another asset of the company which collects it, and that companies can only process it for the purposes for whic

Depends on where you are

It depends on where you are. Here in Europe we have pretty damn clear privacy laws, and a habit of slapping corporations with massive fines for breaking the laws. Plus the usual legal concept that you can't let someone make a profit from breaking the laws,

Privacy?

If I can order a TUTU in my underwear, I'm good.

Where do you get *real* privacy ratings?

I usually read an online shop's privacy policy before buying (along with their other policies). And it's usually legalistic gunk, with a truste logo slapped on, which is worthless given that most policies say "we can change this anytime without prior notification".

So how do you rate what they _do_ instead of what they _say_?

You should not have to know.

So how do you rate what they _do_ instead of what they _say_?

All that can really be done is to pass laws that make inappropriate data sharing unprofitable. This is the only way to make good, privacy respecting service competitive and fix those places w

meanwhile, in the real world, ...

Google just paid 3 *billion* dollars for doubleclick.

And ChoicePoint, which supposedly paid ~$5 million after their little data Valdez incident, seems to be chugging along quite nicely thank you.

Yeah, toothful privacy laws in this country would be great.

Error: Subject Conformation

Fatal flaw: the study told the subjects how to act. They were confronted explicitly with the privacy "device" developed by the researcher. They knew what was being measured and allowed to behave freely. In such circumstances subjects consciously or otherwi

And the conversation went

Researcher: Would you be willing to help us out today by answering a few questions and buying something online? We're researching consumer buying decisions as they correlate to privacy policies of internet merchants.
Woman in Mall: Sure, what do I have to buy?
Researcher: Just batteries. Oh and a... um... vibrator.
Woman in Mall: <turns around and walks away looking for security>
Researcher: But you get to keep it!
Woman in Mall: Well, I guess if it's for scientific research...

What this means

Is that now every shoddy internet business is going to have a big serious looking "we care about your privacy" notice stuck somewhere prominent (but not prominent enough to displace advertising).

They won't change their actual privacy policies or anything, and they'll still leak credit card details etc. to the highest bidders.

Think I'm being cynical? Maybe. But think about it, this is bound to happen.

Isn't privacy a right?

Customers pay for service. If they are willing to pay more for privacy, this means that privacy is equated with a service that can be bought. Since then is privacy something you buy? Isn't privacy a right? Should we pay to enjoy our rights? I am afraid that the blatant lack of privacy has made even the customers to abandon the idea that they have this right as an unrealistic romantic ideal and accept the harsh reality that in today's corporate jungle there are no rights and everything can be sold and bought.

Re:

You go to a party. You introduce yourself to a few people.

Eventually, someone you DIDN'T introduce yourself to comes up and already knows your name.

No, you don't have a right to privacy when you talk to someone else.

What are you paying for?

Really, what are you paying extra for?
So that the store wont stick you on a Spam list?
Wont use your Credit Card drain your bank account?
What is the actual cost involved in limiting your supplied information to the transaction at hand?

If the store even hint

The study's methodology seems flawed to me

From TFA: Participants in the laboratory study...

I've seen over and over again that when you place Internet users in an environment where they are being watched, and know they're being watched, their behavior changes. If you were participating in a stud

Checking out BankRate and Wachovia

The idea here is that they're looking for sites that have a privacy policy expressed in XML, something that's been working since 2002 but never really caught on.

Even the few sites that use that have problems. Check out Bankrate.com [bankrate.com]. According to Priva

Better Surveys: 15% value privacy

A better measure of how you value you privacy is whether you use a store card/loyalty card. Most people are willing to sell their privacy for a small discount, but it seems up to 15% value it enough to reject these cards. Reference is from 2005 but I doubt

Re:Oh, please

This study is BS. Purchase a sex toy? How can this study even be valid. How about trying books or something like that?

How about buying a book about how to use the sex toy you purchased on the other site?

Re:

Yeah. Summary of the article: A test group using a special "privacy finder" search engine to shop for sex toys and batteries will pay extra for privacy.

This clearly leads to the conclusion that all online shoppers care deeply about privacy and will happ

Re:

My biggest concern is that they were forced to review the privacy policy first, which isn't realistic at all. Claiming real-world relevance requires the study be similar to real world circumstances.

Re:

Here's a link to the researchers' actual report [econinfosec.org]. (Never trust a press account of any study of anything. Or a slashdot summary, for that matter.)

This was a controlled experiment, and I agree with your point about real-world relevance. It appears to me that

Re:

It appears to me that the researchers are claiming that if privacy information was made more prominent and easily digestible (as it was in their experiment), people would pay more for privacy.

Rather they might pay more for some text on a website saying o

Re:

Actually, if you bothered to read the paper, you'd find that that's not the case. Privacy information was provided in the margins. No one was actually forced to read any privacy policies before purchasing.

But thanks for playing!

Re:

The cynical side of me envisions some PHB calculating the maximum they can get from selling customer data, and whether this exceeds 4%.

If you were really cynical you'd consider that they could both charge and extra 4% and sell the data...

Re:

You forgot:

Shipping: $6.75

I buy locally if the local store carries something and it's only a couple of dollars difference. Usually when I buy online, it is either because local stores don't have it or because it would save 30% or more of the purchase

Does not always work

What if the company is supposed to send you some data via email, and the message was handled as spam and rejected by your server?

You'll miss the message, thinking the company is a bad one. On their end - they attempt to get in touch with you because they h

Re:

By the way : Funny. A company can demand all sorts of rights when they sell you a product, but a customer can do no such thing when he buys it.
"You cannot guarantee that this product is fit to actually do what you advertised it for ? Well, I can't guaran