Privacy Calculus

Privacy Calculus

The privacy calculus is the idea that people decide whether to share personal data by weighing what they expect to gain against the risks they perceive. Reviews of the privacy paradox treat it as one of the main explanations for disclosure. Experiments show the weighing moves easily with small rewards, design and reassurance.

What it is

Susanne Barth and Menno de Jong reviewed 32 papers covering 35 theories in 2017 and concluded that disclosure is driven by one of two things: weighing benefits against risks, or judging the risk to be negligible.

A field experiment shows how small the benefit can be. In autumn 2014 every undergraduate at the Massachusetts Institute of Technology was offered 100 dollars in bitcoin, and 3,108 signed up. Susan Athey, Christian Catalini and Catherine Tucker randomly offered half of them a free pizza for listing three friends' email addresses. Without the pizza, 5 per cent of students in that group protected their friends by giving invalid addresses; with it, 2.5 per cent did, with little difference by stated privacy preference.

The 2015 Science review by Alessandro Acquisti and colleagues found the pure calculation account incomplete. Choices about personal data, it argued, are also moved by misperceptions, social norms, emotions, rules of thumb and a tendency to favour an immediate reward over a later cost.

In effect

For a consumer, the trade looks rational on paper, but the benefit usually arrives now and in plain sight while the cost is deferred and hard to see. When the reward is a free pizza or a recipe behind a cookie banner, the calculation tips quickly.

What it does not say

It does not say people do not care. A 2017 meta-analysis by Lemi Baruh and colleagues, pooling 166 studies from 34 countries with 75,269 participants, found that privacy concern predicted less use of online services, less information sharing and more protective measures, though not whether people used social network sites.

Daniel Solove argued in 2021 that behaviour in these studies consists of specific risk decisions in particular contexts while stated attitudes are general, so one disclosure says little about how much a person values their data. In Mindmasters (2025) Sandra Matz reports an experiment in which 75 per cent of more than 1,500 participants said they were concerned about privacy and 85 per cent sold their data anyway; the study is unpublished and the book gives no citation, so its design cannot be inspected.

Sources

  1. Barth, S., & de Jong, M. D. T. (2017). "The privacy paradox: investigating discrepancies between expressed privacy concerns and actual online behavior. A systematic literature review." Telematics and Informatics, 34(7), 1038-1058. doi:10.1016/j.tele.2017.04.013.
  2. Athey, S., Catalini, C., & Tucker, C. (2017). "The digital privacy paradox: small money, small costs, small talk." NBER Working Paper 23488. doi:10.3386/w23488.
  3. Acquisti, A., Brandimarte, L., & Loewenstein, G. (2015). "Privacy and human behavior in the age of information." Science, 347(6221), 509-514. doi:10.1126/science.aaa1465.
  4. Baruh, L., Seçinti, E., & Cemalcılar, Z. (2017). "Online privacy concerns and privacy management: a meta-analytical review." Journal of Communication, 67(1), 26-53. doi:10.1111/jcom.12276.
  5. Solove, D. J. (2021). "The myth of the privacy paradox." George Washington Law Review, 89(1), 1-51.
  6. Matz, S. (2025). Mindmasters: The Data-Driven Science of Predicting and Changing Human Behavior. Harvard Business Review Press, ch. 8, pp. 159 to 160.