Consumer Consent and Firm Targeting After GDPR: The Case of a Large Telecom Provider

References

• Acquisti A, Brandimarte L, Loewenstein G (2015) Privacy and human behavior in the age of information. Sci. 347(6221):509–514.Crossref, Google Scholar
• Acquisti A, Adjerid I, Balebako R, Brandimarte L, Cranor LF, Komanduri S, Leon PG, et al. (2017) Nudges for privacy and security: Understanding and assisting users’ choices online. ACM Comput. Surveys 50(3):1–41.Crossref, Google Scholar
• Adjerid I, Acquisti A, Loewenstein G (2019) Choice architecture, framing, and cascaded privacy choices. Management Sci. 65(5):2267–2290.Google Scholar
• Adjerid I, Peer E, Acquisti A (2018) Beyond the privacy paradox: Objective vs. relative risk in privacy decision making. MIS Quart. 42(2):465–488.Google Scholar
• Adjerid I, Acquisti A, Telang R, Padman R, Adler-Milstein J (2015) The impact of privacy regulation and technology incentives: The case of health information exchanges. Management Sci. 62(4):1042–1063.Link, Google Scholar
• Athey S, Tibshirani J, Wager S (2019) Generalized random forests. Ann. Statist. 47(2):1148–1178.Crossref, Google Scholar
• Austin PC (2011) An introduction to propensity score methods for reducing the effects of confounding in observational studies. Multivariate Behav. Res. 46(3):399–424.Crossref, Google Scholar
• Balebako R, Leon P, Shay R, Ur B, Wang Y, Cranor L (2012) Measuring the effectiveness of privacy tools for limiting behavioral advertising. Web 2.0 Security and Privacy Conf. 2012, IEEE Computer Society Security and Privacy Workshops, San Francisco.Google Scholar
• Bapna R, Ramaprasad J, Umyarov A (2018) Monetizing freemium communities: Does paying for premium increase social engagement? MIS Quart. 42(3):719–735.Crossref, Google Scholar
• Barth S, De Jong MD (2017) The privacy paradox—Investigating discrepancies between expressed privacy concerns and actual online behavior—A systematic literature review. Telematics Informatics 34(7):1038–1058.Crossref, Google Scholar
• Bound J, Jaeger DA, Baker RM (1995) Problems with instrumental variables estimation when the correlation between the instruments and the endogenous explanatory variable is weak. J. Amer. Statist. Assoc. 90(430):443–450.Google Scholar
• Brandimarte L, Acquisti A, Loewenstein G (2013) Misplaced confidences: Privacy and the control paradox. Soc. Psych. Personality Sci. 4(3):340–347.Crossref, Google Scholar
• Campbell J, Goldfarb A, Tucker C (2015) Privacy regulation and market structure. J. Econom. Management Strategy 24(1):47–73.Crossref, Google Scholar
• Cavusoglu H, Phan TQ, Cavusoglu H, Airoldi EM (2016) Assessing the impact of granular privacy controls on content sharing and disclosure on Facebook. Inform. Systems Res. 27(4):848–879.Link, Google Scholar
• Cooper JC (2012) Privacy and antitrust: Underpants gnomes, the first amendment, and subjectivity. George Mason Law Rev. 20:1129.Google Scholar
• Cranor LF (2003) P3P: Making privacy policies more useful. IEEE Security Privacy 1(6):50–55.Crossref, Google Scholar
• D’Agostino RB Jr (1998) Propensity score methods for bias reduction in the comparison of a treatment to a non-randomized control group. Statist. Medicine 17(19):2265–2281.Crossref, Google Scholar
• Dinev T, McConnell AR, Smith HJ (2015) Research commentary. Informing privacy research through information systems, psychology, and behavioral economics: Thinking outside the “APCO” box. Inform. Systems Res. 26(4):639–655.Link, Google Scholar
• Gilman DJ, Cooper JC (2009) There is a time to keep silent and a time to speak, the hard part is knowing which is which: Striking the balance between privacy protection and the flow of healthcare information. Michigan Telecommunications Tech. Law Rev. 16:279.Google Scholar
• Goddard M (2017) The EU General Data Protection Regulation (GDPR): European regulation that has a global impact. Internat. J. Marketing Res. 59(6):703–705.Google Scholar
• Godinho de Matos M, Pedro F, Rodrigo B (2018) Target the ego or target the group: Evidence from a randomized experiment in proactive churn management. Marketing Sci. 37(5):793–811.Link, Google Scholar
• Goldberg S, Johnson G, Shriver S (2019) Regulating privacy online: The early impact of the GDPR on European web traffic & e-commerce outcomes. Preprint, submitted July 18, https://dx.doi.org/10.2139/ssrn.3421731.Google Scholar
• Goldfarb A, Tucker CE (2011) Privacy regulation and online advertising. Management Sci. 57(1):57–71.Link, Google Scholar
• Goldfarb A, Tucker C (2012) Shifts in privacy concerns. Amer. Econom. Rev. 102(3):349–353.Crossref, Google Scholar
• Hoofnagle CJ, Urban JM (2014) Alan Westin’s privacy homo economicus. Wake Forest Law Rev. 49:261.Google Scholar
• Jensen C, Potts C (2004) Privacy policies as decision-making tools: An evaluation of online privacy notices. Proc. SIGCHI Conf. Human Factors Comput. Systems (ACM, Vienna, Austria), 471–478.Google Scholar
• Jia J, Jin GZ, Wagman L (2021) The short-run effects of general protection regulation on technology venture investment. Marketing Sci. 40(4):661–684.Google Scholar
• John LK, Acquisti A, Loewenstein G (2010) Strangers on a plane: Context-dependent willingness to divulge sensitive information. J. Consumer Res. 37(5):858–873.Crossref, Google Scholar
• Johnson G, Shriver S, Goldberg S (2019) Privacy & market concentration: Intended & unintended consequences of the GDPR. Preprint, submitted November 15, https://dx.doi.org/10.2139/ssrn.3477686.Google Scholar
• Kariya T (1981) A robustness property of Hotelling’s t2-test. Ann. Statist. 9(1):211–214.Crossref, Google Scholar
• Kim J-H, Wagman L (2015) Screening incentives and privacy protection in financial markets: A theoretical and empirical analysis. RAND J. Econom. 46(1):1–22.Crossref, Google Scholar
• Kim J-H, Wagman L, Wickelgren AL (2019) The impact of access to consumer data on the competitive effects of horizontal mergers and exclusive dealing. J. Econom. Management Strategy 28(3):373–391.Crossref, Google Scholar
• Kokolakis S (2017) Privacy attitudes and privacy behaviour: A review of current research on the privacy paradox phenomenon. Comput. Security 64:122–134.Crossref, Google Scholar
• Libert T, Graves L, Nielsen RK (2018) Changes in third-party content on European news websites after GDPR (Reuters Institute for the Study of Journalism Reports: Factsheet). Reuters Institute for the Study of Journalism. https://ora.ox.ac.uk/objects/uuid:5a5d4eea-6e74-49b4-8c77-71ec6760f127.Google Scholar
• Martin K (2020) Breaking the privacy paradox: The value of privacy and associated duty of firms. Bus. Ethics Quart. 30(1):65–96.Crossref, Google Scholar
• McDonald AM, Cranor LF (2008) The cost of reading privacy policies. IS J. Law Policy Inform. Soc. 4(3):543–568.Google Scholar
• Mello MM, Adler-Milstein J, Ding KL, Savage L (2018) Legal barriers to the growth of health information exchange: Boulders or pebbles? Milbank Quart. 96(1):110–143.Crossref, Google Scholar
• Miller AR, Tucker C (2009) Privacy protection and technology diffusion: The case of electronic medical records. Management Sci. 55(7):1077–1093.Link, Google Scholar
• Miller AR, Tucker C (2018) Privacy protection, personalized medicine, and genetic testing. Management Sci. 64(10):4648–4668.Link, Google Scholar
• Miyazaki AD, Krishnamurthy S (2002) Internet seals of approval: Effects on online privacy policies and consumer perceptions. J. Consumer Affairs 36(1):28–49.Crossref, Google Scholar
• Peukert C, Bechtold S, Batikas M, Kretschmer T (2020) European privacy law and global markets for data. Center for Law & Economics Working Paper Series 1, Zurich.Google Scholar
• Schwartz PM (2005) Privacy inalienability and the regulation of spyware. Berkeley Tech. Law J. 20(3):1269–1282.Google Scholar
• Smith HJ, Dinev T, Xu H (2011) Information privacy research: An interdisciplinary review. MIS Quart. 35(4):989–1016.Crossref, Google Scholar
• Solove DJ (2012) Introduction: Privacy self-management and the consent dilemma. Harvard Law Rev. 126:1880.Google Scholar
• Stock JH, Yogo M (2005) Testing for weak instruments in linear IV regression. Andrews DWK, Stock JH, eds. Identification and Inference for Econometric Models: Essays in Honor of Thomas Rothenberg (Cambridge University Press, New York), 80–108.Google Scholar
• Stutzman FD, Gross R, Acquisti A (2013) Silent listeners: The evolution of privacy and disclosure on Facebook. J. Privacy Confidentiality 4(2):7–41.Crossref, Google Scholar
• Tibshirani J, Athey S, Wager S (2020) GRF: Generalized random forests. R package version 1.2.0. https://CRAN.R-project.org/package=grf.Google Scholar
• Tikkinen-Piri C, Rohunen A, Markkula J (2018) EU General Data Protection Regulation: Changes and implications for personal data collecting companies. Comput. Law Security Rev. 34(1):134–153.Crossref, Google Scholar
• Wager S, Athey S (2018) Estimation and inference of heterogeneous treatment effects using random forests. J. Amer. Statist. Assoc. 113(523):1228–1242.Crossref, Google Scholar
• Xu H, Teo H-H, Tan BC, Agarwal R (2009) The role of push-pull technology in privacy calculus: The case of location-based services. J. Management Inform. Systems 26(3):135–174.Crossref, Google Scholar
• Xu H, Teo H-H, Tan BC, Agarwal R (2012) Research note. Effects of individual self-protection, industry self-regulation, and government regulation on privacy concerns: A study of location-based services. Inform. Systems Res. 23(4):1342–1363.Link, Google Scholar
• Yang B, Godinho de Matos M, Ferreira P (2019) The effect of shortening lock-in periods in telecommunication services. MIS Quart. 40(3):1391–1409Google Scholar
• Zarsky TZ (2016) Incompatible: The GDPR in the age of big data. Seton Hall Law Rev. 47:995.Google Scholar