Can Voluntary Data Sharing Protect Consumers?

In this data-driven age, companies across the economy are actively seeking ways to collect and use consumer data. For example, the car-hailing app Uber has been accused of monitoring their users’ mobile phone battery and then charging them more if their battery is low (see Note 1). The travel website Orbitz has also faced questions…


In this data-driven age, companies across the economy are actively seeking ways to collect and use consumer data. For example, the car-hailing app Uber has been accused of monitoring their users’ mobile phone battery and then charging them more if their battery is low (see Note 1). The travel website Orbitz has also faced questions on whether they display more costly hotels to Apple Mac users (see Note 2). If data is misused, this will only fuel consumer concerns about how their information is collected and force lawmakers to seek more prudent ways to monitor the data collection practices of companies.

In the past decade, legislatures worldwide have been taking action to limit the collection and use of data. Whether it is the European Union’s “General Data Protection Regulation”, the United States’ “California Consumer Privacy Act”, China’s “Personal Information Protection Law” and Australia’s “Online Privacy Bill”, they all reflect an increasingly stringent set of international regulations on data collection activities. Still, governments often find themselves in a Catch-22 situation: If the collection of personal data is not regulated, firms are bound to misuse data which will harm consumers’ rights. On the flip side, a complete ban on companies collecting personal data will prevent consumers from enjoying the conveniences technology brings and stifle the development of the digital economy. That is why we often see a compromised option: Let consumers take complete ownership of their data and allow them to decide whether to share their information with businesses. This strategy appears impeccable – If consumers see data sharing as a good thing, they can choose to voluntarily share their data and enjoy the convenience of data technology. However, if data sharing is despised, consumers may flat-out refuse to release their information. Either way, consumers should benefit. Yet, is this really the case?

Not exactly. First of all, consumers often find it difficult to understand what data businesses have gathered and how they have used that information. Therefore, it is hard for consumers to decide if they should share their data. Even if enterprises have to explain their data collection and usage to consumers through a privacy policy, the provisions are often lengthy and obscure. An analysis in The New York Times highlighted that a reporter had to spend around 18 minutes to read through Facebook’s privacy policy. As for the nearly 150 popular websites and apps scrutinised, most of their privacy policies would require someone with a legal background or above a tertiary-level education to fully understand (see Note 3). It is therefore easy to imagine, the majority of consumers will not have carefully read the companies’ privacy policies but agreed to their data collection.

Another problem is whether to let consumers make their own minds about data sharing. This in itself has already presented companies with enough information to split consumers into two groups – those who are “willing to share data” versus those “unwilling to share data” – and treat them differently. Take Orbitz as an example: If Orbitz provides Microsoft Windows users with cheaper hotel prices and suggests more expensive hotel rooms to Mac users, Windows users may willingly share their data to get better deals. If a user is reluctant to share his or her data, we can safely assume he or she is a Mac user and still offer more expensive room rates. This illustrates that users will be exploited regardless. In fact, the authors’ joint research has found that voluntary data sharing could even push product prices higher and further harm consumers’ rights.

These research findings drive us to rethink how to regulate the collection and usage of data. A blanket ban on data collection is unrealistic. Instead, we should target different types of data and scenarios to formulate more refined regulations. Only when we are absolutely certain that data autonomy is beneficial to consumers should we pass that power onto them. In many cases, it may simply be better to decide for the consumer.

This article is based on Professor Li Xi, Professor Yang Zhilin and Dr. Li Bingqing’s joint research “The Dark Side of Voluntary Data Sharing” which will be published shortly in the MIS Quarterly Journal.

 

Note 1: https://www.vice.com/en/article/uber-surge-pricing-phone-battery/
Note 2: https://www.bbc.com/news/technology-18595347
Note 3: https://www.nytimes.com/interactive/2019/06/12/opinion/facebook-google-privacy-policies.html

 

Professor Li Xi
Professor in Marketing
Director, Asia Case Research Centre
Associate Director, Institute of Digital Economy and Innovation

 

This article was also published on August 22, 2024 on the Financial Times’ Chinese website

Translation
在這個數據當道的時代,各行企業都積極尋求各種方法收集和使用消費者的數據。例如打車軟件Uber被指控監察用戶的手機電量,並向電池快將耗盡的用戶收取更高的價格【注 1】;而在缐旅行平台Orbitz曾被質疑向蘋果Mac用戶顯示較昂貴的酒店價格【注 2】。數據若被濫用,勢必加劇消費者對於平台數據收集的擔憂,也迫使立法者更加審慎的監管企業收集數據的行爲。

過去十年間,各地立法機關均採取行動限制數據的採集和使用,包括歐盟的《通用數據保護條例》、美國的《加利福尼亞消費者隱私保護法》、中國的《個人信息保護法》,以及澳洲的《在缐隱私法案》,均反映國際間對於數據收集活動的監管越趨嚴格。然而,政府很多時候處於一個兩難的局面:如果對個人數據的收集不加限制,企業必然會濫用數據,損害消費者的權益;但另一方面,要是徹底禁止企業收集個人數據,消費者將無法享受數據科技帶來的進步,也不利數字經濟的發展。因此,我們更常看到一種折中的選擇:把數據的所有權交給消費者,讓他們自己決定是否把數據分享給企業。這種策略看似無懈可擊:若消費者把數據分享視爲一件好事,他們可選擇自願分享數據以享受數據科技帶來的便利;但如果數據分享被當作一件壞事,消費者可以選擇拒絕分享。無論哪種情况,消費者理應立於不敗之地。不過,事實真的如此嗎?

其實不然。首先,消費者往往很難弄明白企業到底收集了哪些數據,並用這些數據做了什麽,因此,消費者也難以決定是否應該分享自己的數據。雖然企業需要通過隱私政策向消費者透露他們如何收集和使用數據,但這些條文往往冗長而晦澀。《紐約時報》的一則分析發現,記者要花上18分鐘才能讀完臉書的隱私政策,而近150個熱門網站和應用程序中,不少隱私政策條文更需要擁有法律教育背景或大專程度以上的閱讀水平才能充分理解【注 3】。因此,不難想像,大多數消費者根本沒有仔細閱讀便同意企業收集數據。

另一個問題是,讓消費者決定是否分享數據,這本身已向企業提供了足夠的信息,讓企業可以輕易的將消費者分成「願意分享數據」和「不願意分享數據」兩個群組,並提供區別對待。引用Orbitz的例子:若Orbitz向微軟Windows用戶提供較低的酒店價格,但向Mac用戶推銷更貴的酒店,Windows用戶或會心甘情願分享他們的數據來獲取價格優惠。如果一個用戶不願意分享他的數據,我們可以合理推斷他是一名Mac用戶,並向該名用戶徵收較高的酒店房費。由此可見,無論用戶分享數據與否,都逃不出被大數據割韭菜的命運。事實上,筆者的研究發現,基於自願的數據分享更可能會推高産品的價格,進一步損害消費者的權益。

這些發現促使我們重新考慮如何規管數據採集和共享。一刀切禁止數據採集並不現實,但我們或許應該針對不同類型的數據和不同場景,制定更精細化的數據法規。只有當我們確定數據的自主權有利於消費者的時候,才應該把這個權力交給消費者。在很多情况下,替消費者做決定,可能比讓他們自己做決定更好。

 

本文基於筆者與楊志林教授和李冰清博士的研究「The Dark Side of Voluntary Data Sharing (自願數據共享的陰暗面)」。該研究即將發表於MIS Quarterly雜志。

 

【注 1】: https://www.vice.com/en/article/uber-surge-pricing-phone-battery/

【注 2】: https://www.bbc.com/news/technology-18595347

【注 3】: https://www.nytimes.com/interactive/2019/06/12/opinion/facebook-google-privacy-policies.html

 

李曦教授
市場學教授
亞洲案例研究中心總監
數字經濟與創新研究所副總監

 

本文同時於二零二四年八月二十二日載於「《FT中文網》明德商論」專欄