Having Two Conflicting Goals in Mind: The Tension Between IS Security and Privacy when Avoiding Threats

Despite users of personal IT devices perceive high risks of losing their personal data if their devices get lost or damaged, many are reluctant to use user-friendly online services (i.e., online backups) to recover from such incidents. We suggest that the reason for this denial are information privacy concerns because users need to disclose their personal files to the safeguard provider. As safeguarding services promise to reduce the IS security threat of losing data, individuals are subsequently tensed between two goals: protecting their data against loss (IS security) and their information privacy. To shed light on this goal conflict, our work builds on the theory of goal-directed behavior. Based on a quantitative online survey among 446 participants, we show that privacy concerns impede threat avoidance to prevent data loss. Comparing current users and non-users of online backup services, our results confirm that provider-related privacy concerns are significantly higher for non-users

Beyond the Privacy Calculus: Dynamics Behind Online Self-Disclosure

Self-disclosure is ubiquitous in today’s digitized world as Internet users are constantly sharing their personal information with other users and providers online, for example when communicating via social media or shopping online. Despite offering tremendous benefits (e.g., convenience, personalization, and other social rewards) to users, the act of self-disclosure also raises massive privacy concerns. In this regard, Internet users often feel they have lost control over their privacy because sophisticated technologies are monitoring, processing, and circulating their personal information in real-time. Thus, they are faced with the challenge of making intelligent privacy decisions about when, how, to whom, and to what extent they should divulge personal information. They feel the tension between being able to obtain benefits from online disclosure and wanting to protect their privacy. At the same time, firms rely on massive amounts of data divulged by their users to offer personalized services, perform data analytics, and pursue monetization. Traditionally, privacy research has applied the privacy calculus model when studying self-disclosure decisions online. It assumes that self-disclosure (or, sometimes, usage) is a result of a rational privacy risk–benefit analysis. Even though the privacy calculus is a plausible model that has been validated in many cases, it does not reflect the complex nuances of privacy-related judgments against the background of real-life behavior, which sometimes leads to paradoxical research results. This thesis seeks to understand and disentangle the complex nuances of Internet users’ privacy-related decision making to help firms designing data gathering processes, guide Internet users wishing to make sound privacy decisions given the background of their preferences, and lay the groundwork for future research in this field. Using six empirical studies and two literature reviews, this thesis presents additional factors that influence self-disclosure decisions beyond the well-established privacy risk–benefit analysis. All the studies have been published in peer-reviewed journals or conference proceedings. They focus on different contexts and are grouped into three parts accordingly: monetary valuation of privacy, biases in disclosure decisions, and social concerns when self-disclosing on social networking sites. The first part deals with the value Internet users place on their information privacy as a proxy for their perceived privacy risks when confronted with a decision to self-disclose. A structured literature review reveals that users’ monetary valuation of privacy is very context-dependent, which leads to scattered or occasionally even contradictory research results. A subsequent conjoint analysis supplemented by a qualitative pre-study shows that the amount of compensation, the type of data, and the origin of the platform are the major antecedents of Internet users’ willingness to sell their data on data selling platforms. Additionally, an experimental survey study contrasts the value users ascribe to divulging personal information (benefits minus risks) with the value the provider gets from personal information. Building on equity theory, the extent to which providers monetize the data needs to be taken into account apart from a fair data handling process. In other words, firms cannot monetize their collected user data indefinitely without compensating their users, because users might feel exploited and thus reject the service afterwards. The second part delineates the behavioral and cognitive biases overriding the rational tradeoff between benefits and privacy risks that has traditionally been assumed in privacy research. In particular, evaluability bias and overconfidence are identified as moderators of the link between privacy risks and self-disclosure intentions. In single evaluation mode (i.e., no reference information available) and when they are overconfident, Internet users do not take their perceived privacy risks into account when facing a self-disclosure decision. By contrast, in joint evaluation mode of two information systems and when users are realistic about their privacy-related knowledge, the privacy risks that they perceive play a major role. This proof that mental shortcuts interact with privacy-related judgments adds to studies that question the rational assumption of the privacy calculus. Moving beyond privacy risks, the third part examines the social factors influencing disclosure decisions. A structured literature review identifies privacy risks as the predominantly studied impediment to self-disclosure on social networking sites (SNS). However, a subsequent large scale survey study shows that on SNS, privacy risks play no role when users decide whether to self-disclose. It is rather the social aspects, such as the fear of receiving a negative evaluation from others, that inform disclosure decisions. Furthermore, based on a dyadic study among senders and receivers of messages on SNS, it is shown that senders are subject to a perspective-taking bias: They overestimate the hedonic and utilitarian value of their message for others. In this vein, these studies combine insights from social psychology literature with the uniqueness of online data disclosure and show that, beyond the potential misuse of personal information from providers, the risk of misperception in the eyes of other users is crucial when explaining self-disclosure decisions. All in all, this thesis draws from different perspectives – including value measuring approaches, behavioral economics, and social psychology – to explain self-disclosure decisions. Specifically, it shows that the privacy calculus is oversimplified and, ultimately, needs to be extended with other factors like mental shortcuts and social concerns to portray Internet users’ actual privacy decision making

Giving Users Control Over How Peers Handle Their Data: A Design Science Study

In today’s interconnected world, Internet users are increasingly concerned about losing control over the data they share with peers, which indicates a need for higher levels of control and notification mechanisms. We address this need by building on design science methodology and developing a socio-technical artifact, i.e., a peer-privacy-friendly online messaging service. We draw on Malhotra et al.’s (2004) Internet Users’ Information Privacy Concerns framework and refine and evaluate our artifact via focus groups, interviews, and a survey among users of online messaging services. Our artifact provides senders with the ability to control how their personal information is processed by peers and allows receivers to be made aware of the sender’s privacy expectations. We contribute to the growing literature on peer privacy concerns by developing and evaluating design requirements, principles, and an instantiation that can mitigate peer privacy concerns that go beyond concerns about organizational data practices

When You Share, You Should Care: Examining the Role of Perspective-Taking on Social Networking Sites

Despite good intentions of users who share updates on SNSs, there is mounting evidence that recipients of SNS content frequently perceive shared information as inappropriate, annoying, envy-inducing, and excessive. To examine this apparent gap, we draw on the communication theory and the perceptual congruence model to analyze perceptual differences with the help of dyadic data analysis. Our findings based on 90 sender-recipient pairs show significant percep-tual differences between senders and corresponding recipients of content, with senders attach-ing greater value to their content and scoring both hedonic and utilitarian attributes higher. Additionally, we demonstrate the presence of “false consensus effect” in the SNS environment, meaning that senders anticipate perceptions of recipients to be more similar to their own, than they actually are. Our results provide evidence that sender’s accuracy in predicting recipient’s perceptions contributes to favorable outcomes for both parties, including recipient’s satisfaction with the SNS relationship and positive feedback, desirable for senders. This highlights the im-portance of perspective-taking ability among senders of content. Implications for stakeholders in research and practice are discussed

Putting a Price Tag on Personal Information - A Literature Review

In the digital age, personal information is claimed to be the new commodity with a rising market demand and profitability for businesses. Simultaneously, people are becoming aware of the value of their personal information while being concerned about their privacy. This increases the demand of direct compensation or protection. In response to the commodification of privacy and the increased demand for compensation, a number of scholars have shed light on the value people assign to their personal information. However, these findings remain controversial as their results differ tremendously due to different research methods and contexts. To address this gap, we conducted a systematic literature review to gain insights into the current research state and to identify further research avenues. By synthesizing and analyzing 37 publications, we provide an integrative framework along with seven contextual factors affecting individuals’ valuation of privacy

Understanding Self-Disclosure on Social Networking Sites - A Literature Review

User-generated content is the backbone of any social networking site (SNS) and an important pillar of many business models online. While there is a growing body of research on self-disclosure on SNSs, existing insights remain scattered. To fill this gap, we undertake a systematic literature review by examining 50 studies to identify the factors behind self-disclosure on SNSs. We find that social exchange theory and its extension ‘privacy calculus’ represent a dominant theoretical perspective. Hence, we focus on perceived benefits and costs, as well as cost-mitigating factors as main areas of our investigation. Since personality traits are commonly controlled for or studied within the context of SNS disclosure, we additionally include an exploration of this factor group into our review

What is Your Selfie Worth? A Field Study on Individuals’ Valuation of Personal Data

Referred to as the new oil, undoubtedly personal data is a valuable resource for organizations. Contrary, it is still blurred, to what extent individuals value their data even though, in a digitized world, users are requested to exchange their data for adequate services. Former research on individuals’ valuation of personal data result in scattered, partly contradictious values, depending on the data type, context, and the measurement method. In this study, we aimed to facilitate the valuation for individuals by applying a new and promising measurement methodology: the participants of our field experiment had the chance to sell their selfies in a name-your-own-price auction with repeated bidding and feedback loops. As a result, 39% of our participants were willing to donate or sell their selfies with a median of 5€. Additionally, bidding clusters were identified. Implications for research on the valuation of personal data in terms of privacy are discussed

Navigating life with hiv as an older adult on the Kenyan Coast: perceived health challenges seen through the biopsychosocial model

Objectives: This study explores the perceptions of adults living with HIV aged ≥50 years (recognized as older adults living with HIV—OALWH), primary caregivers and healthcare providers on the health challenges of ageing with HIV at Kilifi, a low literacy setting on the coast of Kenya. Methods: We utilized the biopsychosocial model to explore views from 34 OALWH and 22 stakeholders on the physical, mental, and psychosocial health challenges of ageing with HIV in Kilifi in 2019. Data were drawn from semi-structured in-depth interviews, which were audio-recorded and transcribed. A framework approach was used to synthesize the data. Results: Symptoms of common mental disorders, comorbidities, somatic symptoms, financial difficulties, stigma, and discrimination were viewed as common. There was also an overlap of perceived risk factors across the physical, mental, and psychosocial health domains, including family conflicts and poverty. Conclusion: OALWH at the Kenyan coast are perceived to be at risk of multiple physical, mental, and psychosocial challenges. Future research should quantify the burden of these challenges and examine the resources available to these adults

Strategies for improving mental health and wellbeing used by adults ageing with HIV from the Kenyan coast: a qualitative exploration

Background: Physical and mental health problems are common among older adults living with HIV (OALWH). Adaptive coping strategies play a vital role in improving these adults\u27 mental health and well-being despite the deleterious effects of HIV and ageing. However, in sub-Saharan Africa, limited evidence exists on the commonly utilized coping strategies in this population. We explore the coping strategies used by Kenyan OALWH to improve their mental health and wellbeing. Methods: Semi-structured in-depth interviews were conducted between October and December 2019 with 56 participants: 34 OALWH (53% female), 11 healthcare providers (63% female) and 11 primary caregivers (73% female) in Kilifi County. All interviews were audiorecorded and transcribed verbatim. We used the framework approach to synthesize the qualitative data. Results: Five major themes emerged from the analysis of participants’ narratives, including self-care practices, religion and spirituality, relational living (social connectedness), generativity, identity, and mastery. Our study further revealed maladaptive coping strategies, including reliance on over-the-counter medications, self-isolation, waiting to see if symptoms would subside despite doing nothing, and HIV treatment interruptions during prolonged periods of prayer and fasting. Conclusions: Our findings provide an initial understanding of the coping strategies used by OALWH to confront HIV and ageing challenges in a low-literacy, low socio-economic Kenyan setting. Our results suggest that interventions designed to enhance personal capacity, social support, positive religiosity and spirituality, and intergenerational connections may be beneficial in improving the mental health and well-being of OALWH

Acting Egoistically in a Crisis: How Emotions Shape Data Donations

The spread of COVID-19 has affected all of us, be it financially, socially, or even physically. It has caused uncertainty and anxiety, which has put people into a "hot" mental state. Referred to as an empathy gap, people are assumed to make emotion-driven decisions in "hot" states compared to "cold" states, which contrasts with the normative assumption of rational decision-making in privacy research. Based on an experimental survey study among 445 participants, we investigate whether people's mental state interacts with individuals' information disclosure decision-making. We measure our research model in the context of actual health data donation, which constitutes a critical surveillance factor in the COVID-19 crisis. Thereby, we contribute to research by (1) investigating data donation behavior amid a crisis and (2) helping to explain further nuances of privacy decision-making and the importance of trust as a context-dependent driver of data donation