Effects of individual self-protection, industry self-regulation, and government regulation on privacy concerns: A study of location-based services

Information Systems Research

Volumn 23, Issue 4, 2012, Pages 1342-1363

  Xu, Heng ^a   Teo, Hock Hai ^b   Tan, Bernard C Y ^b   Agarwal, Ritu ^c  

^a PENNSYLVANIA STATE UNIVERSITY   (United States)

^b NATIONAL UNIVERSITY OF SINGAPORE   (Singapore)

^c UNIVERSITY OF MARYLAND   (United States)

Author keywords

And government regulation; Context specific concerns for information privacy; Control agency; Individual self protection; Industry self regulation; Privacy; Psychological control

Indexed keywords

DATA PRIVACY; DEREGULATION; INFORMATION DISSEMINATION; LAWS AND LEGISLATION; TELECOMMUNICATION SERVICES;

GOVERNMENT LEGISLATIONS; GOVERNMENT REGULATION; INDUSTRY SELF-REGULATIONS; INFORMATION PRIVACY; INTERACTION EFFECT; PERSONAL INFORMATION; PRIVACY ASSURANCE; SELF PROTECTION;

LOCATION BASED SERVICES;

EID: 84871593116     PISSN: 10477047     EISSN: 15265536     Source Type: Journal    
DOI: 10.1287/isre.1120.0416     Document Type: Article

References (116)

1. ABI (2011) Location analytics and privacy: The impact of privacy on LBS, location analytics, and advertising. Allied Business Intelligence Inc. http://www.abiresearch.com/research/1007751.
2. Ackerman MS, Mainwaring SD (2005) Privacy issues and humancomputer interaction. Garfinkel S, Cranor L, eds. Security and Usability: Designing Secure Systems That People Can Use (O'Reilly, Sebastopol, CA), 381-400.
3. Acquisti A, Grossklags J (2005) Privacy and rationality in individual decision making. IEEE Security Privacy 3(1):26-33.
4. Agarwal R, Karahanna E (2000) Time flies when you're having fun: Cognitive absorption and beliefs about information technology usage. MIS Quart. 24(4):665-692.
5. Ajzen I (2001) Nature and operation of attitudes. Annual Rev. Psych. 52(February):27-58.
6. Altman I (1976) Privacy: A conceptual analysis. Environment Behav. 8(1):7-29.
7. Angst CM, Agarwal R (2009) Adoption of electronic health records in the presence of privacy concerns: The elaboration likelihood model and individual persuasion. MIS Quart. 33(2):339-370.
8. Armstrong JS, Overton TS (1977) Estimating nonresponse bias in mail surveys. J. Marketing Res. 14(3):396-402.
9. Awad NF, Krishnan MS (2006) The personalization privacy paradox: An empirical evaluation of information transparency and the willingness to be profiled online for personalization. MIS Quart. 30(1):13-28.
10. Bandura A (2001) Social cognitive theory: An agentic perspective. Annual Rev. Psych. 52(1):1-26.
11. Bansal G, Zahedi F, Gefen D (2008) The moderating influence of privacy concern on the efficacy of privacy assurance mechanisms for building trust: A multiple-context investigation. Proc. 29th Annual Internat. Conf. Inform. Systems (ICIS 2008), Paris, France (AIS, Atlanta).
12. Bansal G, Zahedi FM, Gefen D (2010) The impact of personal dispositions on information sensitivity, privacy concern and trust in disclosing health information online. Decision Support Systems 49(2):138-150.
13. Barkhuus L, Dey A (2003) Location-based services for mobile telephony: A study of user's privacy concerns. Proc. INTERACT, 9th IFIP TC13 Internat. Conf. Human-Comput. Interaction, Zurich, Switzerland (IOS Press, Amsterdam), 709-712.
14. Barkhuus L, Brown B, Bell M, Sherwood S, Hall M, Chalmers M (2008) From awareness to repartee: Sharing location within social groups. Proc. Twenty-Sixth Annual SIGCHI Conf. Human Factors Comput. Systems (ACM, Florence, Italy), 497-506.
15. Baron RM, Kenny DA (1986) The moderator-mediator variable distinction in social psychological research: Conceptual, strategic, and statistical considerations. J. Personality Soc. Psych. 51(6):1173-1182.
16. Bellman S, Johnson EJ, Kobrin SJ, Lohse GL (2004) International differences in information privacy concerns: A global survey of consumers. Inform. Soc. 20(5, Nov-Dec):313-324.
17. Berendt B, Gunther O, Spiekermann S (2005) Privacy in e-commerce: Stated preferences vs. actual behavior. Comm. ACM 48(4):101-106.
18. Berghel H (1997) Cyberspace 2000: Dealing with information overload. Comm. ACM 40(2):19-24.
19. Brandimarte L, Acquisti A, Loewenstein G (2010) Misplaced confidences: Privacy and the control paradox. Proc. Workshop Econom. Inform. Security (WEIS), Boston, June 2010, http://weis2010.econinfosec.org/papers/session2/weis2010_brandimarte.pdf.
20. Buchanan T, Paine C, Joinson AN, Reips U (2007) Development of measures of online privacy concern and protection for use on the internet. J. Amer. Soc. Inform. Sci. Tech. 58(2):157-165.
21. Burkert H (1997) Privacy-enhancing technologies: Typology, critique, vision. Agre P, Rotenberg M, eds. Technology and Privacy: The New Landscape (MIT Press, Cambridge, MA), 126-143.
22. Campbell DT, Fiske DW (1959) Convergent and discriminant validation by the multitrait-multimethod matrix. Psych. Bulletin 56(1):81-105.
23. Carte AT, Russell JC (2003) In pursuit of moderation: Nine common errors and their solutions. MIS Quart. 27(3):479-501.
24. Caudill EM, Murphy PE (2000) Consumer online privacy: Legal and ethical issues. J. Public Policy and Marketing 19(1):7-19.
25. Chin WW (1998) The partial least squares approach to structural equation modeling. Marcoulides GA, ed. Modern Methods for Business Research (Lawrence Erlbaum Associates, Mahwah, NJ), 295-336.
26. Chin WW, Marcolin BL, Newsted PR (2003) A partial least squares latent variable modeling approach for measuring interaction effects: Results from a Monte Carlo simulation study and an electronic-mail emotion/adoption study. Inform. Systems Res. 14(2):189-217.
27. Cohen J (1988) Statistical Power Analysis for the Behavioral Sciences, 2nd ed. (L. Erlbaum Associates, Hillsdale, NJ).
28. Cook M, Campbell DT (1979) Quasi-Experimentation: Design and Analysis Issues for Field Settings (Houghton Mifflin, Boston)
29. Cranor LF (2002) Web Privacy with P3P (O'Reilly & Associates, Sebastopol, CA)
30. CTIA (2008) Best practices and guidelines for location based services. The Cellular Telecommunications and Internet Association (CTIA). http://www.ctia.org/content/index.cfm/AID/11300.
31. Culnan MJ (1993) "How did they get my name"? An exploratory investigation of consumer attitudes toward secondary information use. MIS Quart. 17(3):341-364.
32. Culnan MJ (1995) Consumer awareness of name removal procedures: Implication for direct marketing. J. Interactive Marketing 9(2):10-19.
33. Culnan MJ (2000) Protecting privacy online: Is self-regulation working? J. Public Policy and Marketing 19(1):20-26.
34. Culnan MJ, Armstrong PK (1999) Information privacy concerns, procedural fairness and impersonal trust: An empirical investigation. Organ. Sci. 10(1):104-115.
35. Culnan MJ, Bies JR (2003) Consumer privacy: Balancing economic and justice considerations. J. Soc. Issues 59(2):323-342.
36. Culnan MJ, Williams CC (2009) How ethics can enhance organizational privacy: Lessons from the Choicepoint and TJX data breaches. MIS Quart. 33(4):673-687.
37. DeCew JW (1997) In Pursuit of Privacy: Law, Ethics, and the Rise of Technology (Cornell University Press, Ithaca, NY)
38. Dhillon GS, Moores T (2001) Internet privacy: Interpreting key issues. Inform. Resources Management J. 14(4):33-37.
39. Dinev T, Hart P (2004) Internet privacy concerns and their antecedents-measurement validity and a regression model. Behav. Inform. Tech. 23(6):413-423.
40. Dinev T, Hart P (2006) An extended privacy calculus model for e-commerce transactions. Inform. Systems Res. 17(1):61-80.
41. Edelman B (2011) Adverse selection in online "trust" certifications and search results. Electronic Commerce Res. Appl. 10(1):17-25.
42. Eppler MJ, Mengis J (2004) The concept of information overload: A review of literature from organization science, marketing, accounting, MIS, and related disciplines. Inform. Soc. 20(5):325-344.
43. Falk RF, Miller NB (1992) A Primer for Soft Modeling (The University of Akron Press, Akron, OH)
44. FTC (2000) Privacy online: Fair information practices in the electronic marketplace. Federal Trade Commission. http://www .ftc.gov/reports/privacy2000/privacy2000.pdf.
45. FTC (2009) Beyond voice: Mapping the mobile marketplace. Federal Trade Commission. www.ftc.gov/opa/2009/04/mobilerpt .shtm.
46. FTC (2010) A preliminary FTC staff report on protecting consumer privacy in an era of rapid change: A proposed framework for businesses and policymakers. Federal Trade Commission. http://www.ftc.gov/opa/2010/12/privacyreport.shtm.
47. Goldsmith RE, Freiden JB, Kilsheimer JC (1993) Social values and female fashion leadership: A cross-cultural study. Psych. Marketing 10(5):399-412.
48. Goodwin C (1991) Privacy: Recognition of a consumer right. J. Public Policy and Marketing 10(1):149-166.
49. Harding A (2001) Comparative law and legal transplantation in South East Asia. Nelken D, Feest J, eds. Adapting Legal Cultures (Hart Publishing, Oxford, Portland, OR), 199-222.
50. Hoadley MC, Xu H, Lee J, Rosson MB (2010) Privacy as information access and illusory control: The case of the Facebook news feed privacy outcry. Electronic Commerce Res. Appl. 9(1):50-60.
51. Hoffman DL, Novak TP, Peralta MA (1999) Information privacy in the marketspace: Implications for the commercial uses of anonymity on the web. Inform. Soc. 15(2):129-139.
52. Hui KL, Teo HH, Lee SYT (2007) The value of privacy assurance: An exploratory field experiment. MIS Quart. 31(1):19-33.
53. Im G, Rai A (2008) Knowledge sharing ambidexterity in long-term interorganizational relationships. Management Sci. 54(7):1281-1296.
54. Johnson CA (1974) Privacy as personal control. Carson DH, ed. Man-Environment Interactions: Evaluations and Applications: Part 2 (Environmental Design Research Association, Washington, DC), 83-100.
55. Junglas IA, Watson RT (2006) The U-constructs: Four information drives. Comm. AIS 17(1):569-592.
56. Junglas IA, Johnson NA, Spitzmüller C (2008) Personality traits and concern for privacy: An empirical study in the context of location-based services. Eur. J. Inform. Systems 17(4):387-402.
57. Langer EJ (1975) The illusion of control. J. Personality Soc. Psych. 32(2):311-328.
58. Laufer RS, Wolfe M (1977) Privacy as a concept and a social issue-multidimensional developmental theory. J. Soc. Issues 33(3):22-42.
59. Li H, Sarathy R, Xu H. (2011) The role of affect and cognition on online consumers' willingness to disclose personal information. Decision Support Systems 51(3):434-445.
60. Lindell MK, Whitney DJ (2001) Accounting for common method variance in cross-sectional research designs. J. Appl. Psych. 86(1):114-121.
61. Malhotra KN, Kim SS, Agarwal J (2004) Internet users' information privacy concerns (IUIPC): The construct, the scale, and a causal model. Inform. Systems Res. 15(4):336-355.
62. Malhotra KN, Kim SS, Patil A (2006) Common method variance in IS research: A comparison of alternative approaches and a reanalysis of past research. Management Sci. 52(12):1865-1883.
63. Margulis TS (2003a) Privacy as a social issue and behavioral concept. J. Soc. Issues 59(2):243-261.
64. Margulis TS (2003b) On the status and contribution of Westin's and Altman's theories of privacy. J. Soc. Issues 59(2):411-429.
65. McKnight DH, Choudhury V, Kacmar C (2002) Developing and validating trust measures for e-commerce: An integrative typology. Inform. Systems Res. 13(3):334-359.
66. Metzger MJ (2006) Effects of site, vendor, and consumer characteristics on web site trust and disclosure. Comm. Res. 33(3):155-179.
67. Miller SM (1980) Why having control reduces stress: If I can stop the roller coaster I don't want to get off. Garder J, Seligman MEP, eds. Human Helplessness: Theory and Applications (Academic Press, New York), 71-95.
68. Milne GR, Culnan MJ (2004) Strategies for reducing online privacy risks: Why consumers read (or don't read) online privacy notices. J. Interactive Marketing 18(3):15-29.
69. Milne GR, Rohm A (2000) Consumer privacy and name removal across direct marketing channels: Exploring opt-in and opt-out alternatives. J. Public Policy and Marketing 19(2):238-249.
70. Mowday RT, Sutton RI (1993) Organizational behavior: Linking individuals and groups to organizational contexts. Annual Rev. Psych. 44(1):195-229.
71. Moores T (2005) Do consumers understand the role of privacy seals in e-commerce? Comm. ACM 48(3):86-91.
72. Moores T, Dhillon G (2003) Do privacy seals in e-commerce really work? Comm. ACM 46(12):265-271.
73. Nicolaou AI, McKnight DH (2006) Perceived information quality in data exchanges: Effects on risk, trust, and intention to use. Inform. Systems Res. 17(4):332-351.
74. Nunnally JC (1978) Psychometric Theory, 2nd ed. (McGraw-Hill, New York).
75. Oded N, Sunil W (2009) Social computing privacy concerns: Antecedents and effects. Proc. 27th Internat. Conf. Human Factors Comput. Systems (CHI) (ACM, Boston), 333-336.
76. Pavlou PA, Gefen D (2004) Building effective online marketplaces with institution-based trust. Inform. Systems Res. 15(1):37-59.
77. Pavlou PA, Liang H, Xue Y (2007) Understanding and mitigating uncertainty in online exchange relationships: A principal-agent perspective. MIS Quart. 31(1):105-136.
78. Phelps J, Nowak G, Ferrell E (2000) Privacy concerns and consumer willingness to provide personal information. J. Public Policy and Marketing 19(1):27-41.
79. Podsakoff MP, MacKenzie BS, Lee JY, Podsakoff NP (2003) Common method biases in behavioral research: A critical review of the literature and recommended remedies. J. Appl. Psych. 88(5):879-890.
80. Reed GM, Taylor SE, Kemeny ME (1993) Perceived control and psychological adjustment in gay men with AIDS. J. Appl. Soc. Psych. 23(10):791-824.
81. Schoeman FD (1984) Philosophical Dimensions of Privacy: An Anthology (Cambridge University Press, Cambridge, UK)
82. Schwartz MP (1999) Privacy and democracy in cyberspace. Vanderbilt Law Rev. 52(6):1610-1701.
83. Sheehan KB (1999) An investigation of gender differences in online privacy concerns and resultant behaviors. J. Interactive Marketing 13(4):24-38.
84. Sheehan KB (2002) Toward a typology of Internet users and online privacy concerns. Inform. Soc. 18(1):21-32.
85. Skinner EA (1996) A guide to constructs of control. J. Personality Soc. Psych. 71(3):549-570.
86. Slyke CV, Shim JT, Johnson R, Jiang JJ (2006) Concern for information privacy and online consumer purchasing. J. Assoc. Inform. Systems 7(6):415-444.
87. Smith HJ (2004) Information privacy and its management. MIS Quart. Executive 3(4):201-213.
88. Smith HJ, Dinev T, Xu H (2011) Information privacy research: An interdisciplinary review. MIS Quart. 35(4):989-1015.
89. Smith HJ, Milberg JS, Burke JS (1996) Information privacy: Measuring individuals' concerns about organizational practices. MIS Quart. 20(2, June):167-196.
90. Sobel ME (1982) Asymptotic intervals for indirect effects in structural equations models. Leinhart S, ed. Sociological Methodology (Jossey-Bass, San Francisco), 290-312.
91. Solove DJ (2002) Conceptualizing privacy. California Law Rev. 90(4):1087-1155.
92. Solove DJ (2006) A taxonomy of privacy. Univ. Pennsylvania Law Rev. 154(3):477-560.
93. Solove DJ (2007) "I've got nothing to hide" and other misunderstandings of privacy. San Diego Law Rev. 44(4):745-772.
94. Son JY, Kim SS (2008) Internet users' information privacy-protective responses: A taxonomy and a nomological model. MIS Quart. 32(3):503-529.
95. Spiekermann S, Cranor LF (2009) Engineering privacy. IEEE Trans. Software Engrg. 35(1):67-82.
96. Spiro WG, Houghteling LJ (1981) The Dynamics of Law, 2nd ed. (Harcourt Brace Jovanovich, New York).
97. Squicciarini CA, Xu H, Zhang X (2011) CoPE: Enabling collaborative privacy management in online social networks. J. Amer. Soc. Inform. Sci. Tech. 62(3):521-534.
98. Stewart KA, Segars AH (2002) An empirical examination of the concern for information privacy instrument. Inform. Systems Res. 13(1):36-49.
99. Sundar SS, Marathe SS (2010) Personalization vs. customization: The importance of agency, privacy, and power usage. Human Comm. Res. 36(3):298-322.
100. Swire PP (1997) Markets, self-regulation, and government enforcement in the protection of personal information. Daley WM, Irving L, eds. Privacy and Self-Regulation in the Information Age (Department of Commerce, Washington, DC), 3-19.
101. Tang Z, Hu YJ, Smith MD (2008) Gaining trust through online privacy protection: Self-regulation, mandatory standards, or caveat emptor. J. Management Inform. Systems 24(4):153-173.
102. TRUSTe (2004) TRUSTe plugs into wireless: TRUSTe's wireless advisory committee announces first wireless privacy standards. http://www.truste.org/articles/wireless_guidelines_0304.php.
103. Tsai YJ, Kelly GP, Cranor FL, Sadeh N (2010) Location-sharing technologies: Privacy risks and controls. I/S: J. Law Policy Inform. Soc. 6(2):119-151.
104. Turner EC, Dasgupta S (2003) Privacy on the Web: An examination of users concerns, technology, and implications for business organizations and individuals. Inform. Systems Management 20(1):8-18.
105. Waldo J, Lin H, Millett LI (2007) Engaging Privacy and Information Technology in a Digital Age (National Academies Press, Washington, DC)
106. Wallston AK (2001) Conceptualization and operationalization of perceived control. Baum A, Revenson TA, Singer JE, eds. Handbook of Health Psychology (Lawrence Erlbaum Associates, Mahwah, NJ), 49-58.
107. Wang W, Benbasat I (2009) Interactive decision aids for consumer decision making in e-commerce: The influence of perceived strategy restrictiveness. MIS Quart. 33(2):293-320.
108. Wang N, Xu H, Grossklags J (2011) Third-party apps on Facebook: Privacy and the illusion of control. Proc. ACM Sympos. Comput.-Human Interaction for Management Inform. Tech. (CHIMIT), Boston (ACM, New York).
109. Weisz JR, Rothbaum FM, Blackburn TC (1984) Standing out and standing in: The psychology of control in America and Japan. Amer. Psych. 39(9):955-969.
110. Westin AF (1967) Privacy and Freedom (Atheneum, New York)
111. Wetzels M, Odekerken-Schroder G, van Oppen C (2009) Using PLS path modeling for assessing hierarchical construct models: Guidelines and empirical illustration. MIS Quart. 33(1):177-195.
112. Xu H, Dinev T, Smith HJ, Hart P (2008) Examining the formation of individual's information privacy concerns: Toward an integrative view. Proc. 29th Annual Internat. Conf. Inform. Systems (ICIS 2008), Paris, France (AIS, Atlanta).
113. Xu H, Dinev, T, Smith HJ, Hart P (2011) Information privacy concerns: Liking individual perceptions with institutional privacy assurances. J. Assoc. for Inform. Systems 12(12): 798-824.
114. Xu H, Teo HH, Tan BCY, Agarwal R (2010) The role of push-pull technology in privacy calculus: The case of location-based services. J. Management Inform. Systems 26(3):135-174.
115. Yamaguchi S (2001) Culture and control orientations. Matsumoto D, ed. The Handbook of Culture and Psychology (Oxford University Press, New York), 223-243.
116. Zweig D, Webster J (2002) Where is the line between benign and invasive? An examination of psychological barriers to the acceptance of awareness monitoring systems. J. Organ. Behav. 23(5):605-633.