Home > ResourceBlog > Article

« All ResourceBlog Articles



Saturday, 27th September 2008

Paper -- The Time Value of Reading Privacy Policies

The Time Value of Reading Privacy Policies (PDF; 377 KB)

Companies collect personally identifiable information that website visitors are not always comfortable sharing. One proposed remedy is using economics rather than legislation to address privacy risks by creating a market place for privacy where website visitors would choose to accept or reject offers for small payments in exchange for loss of privacy. The notion of micropayments for privacy has not been realized in practice, perhaps because as Simson Garfinkel points out, advertisers might be willing to pay a penny per name and address yet few people would sell their contact information for only a penny (Garfinkel, 2001). In this paper we contend that the time to read privacy policies is, in and of itself, a form of payment. However, instead of receiving payments to reveal information, website visitors must pay with their time to research policies in order to retain their privacy. We pose the question: if website users were to read the privacy policy for each site they visit just once a year, what would the loss of their time be worth?

Studies show privacy policies are hard to read, read infrequently, and do not support rational decision making. We calculated the average time to read privacy policies in two ways. First, we used a list of the 75 most popular websites and assumed an average reading rate of 250 words per minute to find an average reading time of 10 minutes per policy. Second, we conducted an online study of 93 participants to measure time to skim online privacy policies and respond to simple comprehension questions with an average time of 6 minutes per policy. We then used data from Nielsen/Net Ratings to estimate the number of unique websites the average Internet user visits annually with a lower bound of 119 sites. We estimated the total number of Americans online based on Pew Internet & American Life data and Census data. Finally, we estimated the value of time as 25% of average hourly salary for leisure and twice wages for time at work. We present a range of values, and found the nationwide cost for just the time to read policies is on the order of $136 billion. Additional time for comparing policies between multiple sites in order to make informed decisions about privacy brings the social cost well above the market for online advertising. Given that web users also have some value for their privacy on top of the time it takes to read policies, this suggests that under the current self-regulation framework, targeted online advertising may have negative social utility.

See: Lost in the Fine Print: It Would Take a Week to Read All Your Privacy Policies (Washington Post)


« All ResourceBlog Articles



Article Categories

All Article Categories »


All Archives »