Today in Digital Marketing - Special Episode: How Privacy Notices Affect Consumer Purchase Intent

Episode Date: October 12, 2023

Tod interviews the co-author of a new scientific research study called "The Bulletproof Glass Effect: Unintended Consequences of Privacy Notices.".🌍 Follow us on our social media📰 Get ou...r free daily newsletter⭐ Review the podcast✉️ Contact Us: Email or Send Voicemail·GO PREMIUM!Get these exclusive benefits when you upgrade:✅ Listen ad-free✅ Meta Ad platform updates with Andrew Foxwell✅ Google Ad platform updates with Jyll Saskin Gales✅ Back catalog of 20+ marketing science interviews✅ Story links in show notes✅ “Skip to story” audio chapters✅ Member-exclusive Slack channel✅ Member-only Monthly livestreams with Tod✅ Discounts on marketing tools✅...and a lot more!Check it out: todayindigital.com/premium·ADVERTISING📈 Advertising Options📰 $20 Classified Ads·GET MORE FROM US🎙️ Our other podcast "Behind the Ad"📰 Our “The Top Story” LinkedIn newsletter🤝 Our Slack community🆘 Need help with your social media? Check us out: engageQ digital·UPGRADE YOUR SKILLS• Inside Google Ads with Jyll Saskin Gales• Google Ads for Beginners with Jyll Saskin Gales• Foxwell Slack Group and CoursesSome links in these show notes may provide affiliate revenue to us.·Today in Digital Marketing is hosted by Tod Maffin and produced by engageQ digital on the traditional territories of the Snuneymuxw First Nation on Vancouver Island, Canada.Our Sponsors:* Check out Kinsta: https://kinsta.comPrivacy & Opt-Out: https://redcircle.com/privacy

Transcript
Discussion (0)
Starting point is 00:00:00 Hello, today's episode is a special edition as I'm out of the country for agency business until Tuesday night. In those four days of absence, though, we are bringing you some deep dive interviews with marketing scientists. These interviews are usually exclusive to members of the Premium Podcast or our Premium Newsletter, but we're bringing you four of these during my absence. If you like what you hear and want to learn more about the premium podcast, just tap go premium in the show notes. Our regular marketing newscasts return when I'm back on Wednesday. Enjoy. Do you have business insurance?
Starting point is 00:00:33 If not, how would you pay to recover from a cyber attack, fire damage, theft or a lawsuit? No business or profession is risk free. Without insurance, your assets are at risk from major financial losses, data breaches, and natural disasters. Get customized coverage today starting at $19 per month at zensurance.com. Be protected. Be Zen. One of the jobs of a marketer is to instill in the consumer a sense of trust. Trust in the brand, trust in the product or service, trust in how the company handles their personal data, and so on. The latter job is often fulfilled by putting a privacy notice on the site.
Starting point is 00:01:11 Sometimes we do it because it's the law in our country. Sometimes in an effort to show people we are a responsible company. But are we shooting ourselves in the proverbial foot? That's what Arian Brough and his colleagues set out to discover. Dr. Brough is an associate professor of marketing at John M. Huntsman School of Business at Utah State University. He is the co-author of a new scientific research study called The Bulletproof Glass Effect, Unintended Consequences of Privacy Notices. And he joins me from his office in Logan, Utah. Dr. Brough, welcome. Thanks, Todd. Good to be here.
Starting point is 00:01:47 So let's start with the top line findings. What were those unintended consequences? Yeah, so we set out trying to understand how consumers respond to privacy notices. And so as part of the research, we surveyed managers across different industries, and a large majority of these managers expected privacy notices to help customers feel more secure. But it turns out their intuition was flawed. So we conducted a series of six experiments involving nearly 20,000 people, and we compared consumers' interest in purchasing from a website or an app that either included or didn't include a privacy notice.
Starting point is 00:02:26 And one of the things we found is that telling customers how their personal data is protected can undermine consumer trust and discourage them from making a purchase. So I like to compare it to going to an elementary school and seeing bulletproof glass and metal detectors. Their purpose is there to protect you, but instead of making you feel safe, they could make you feel more vulnerable. It's interesting because that's counter to, I think, everything that is both instinctive as marketers and everything that's taught as well. Like, you would think that the more we layer on sort of, you know, we'll take care of your data, the more secure people feel. Yeah. And, you know, so certainly this does challenge that intuition, right? That telling consumers how their personal
Starting point is 00:03:09 data will be protected is going to be good for business. And for most firms and privacy advocates, that's not great news. As researchers, my co-authors and I are definitely supportive of respecting consumers' privacy. And we want to encourage firms to be responsible and transparent in their data practices. So another thing we looked at after kind of initially discovering this is how could we provide actionable guidance to managers on how to effectively convey privacy information without hurting purchase interest. And so we tested how changes in the wording of a privacy notice affected consumers' willingness to purchase. And we found that consumers were less turned off
Starting point is 00:03:51 by privacy notices that included what we call benevolence cues. So those would be statements like, we care about protecting your privacy, or we respect you and promise to treat you fairly, or we're committed to the protection of your information. And the interesting thing is that although these statements don't offer any legal protection to consumers, they do seem to help build trust by conveying to consumers that companies have good intentions. And so adding these benevolence cues to a privacy notice
Starting point is 00:04:23 can reduce or even reverse its negative effects on purchase interest. I think the example that you used in this study was that you changed the phrase, we collect your information to we protect your information. Did you study how people's purchase intent changed when you made substitutions like that? Yes. So in fact, in one study, people were more likely to buy a product when a privacy notice had these benevolence cues than when a privacy notice did not include comforting language or when privacy information wasn't readily available at all during the checkout process. One of your studies came from a test that you did on a financial services website, like a real site, one that's in the market. Can you walk us through what you tested and what you found?
Starting point is 00:05:09 Sure. So, you know, there was surprisingly little previous research about how privacy notices affect consumers' purchase decisions. And as far as I know, we conducted the first published field experiment looking at this issue with actual customers. So the company we partnered with was Borrowell, which is a Canadian financial technology firm with over a million users. And to sign up for Borrowell's service, visitors have to complete a nine-step enrollment process that involves providing some sensitive personal information. They have to give things like their name, their address, birth date, phone number, income, financial goals, and access to a credit report.
Starting point is 00:05:51 And so each prospective customer who visited the site was randomly assigned to one of two conditions. In the control condition, only a hyperlink to Borrowell's privacy policy was provided on the first screen of the sign-up process. In the other condition, the link was preceded by an explanation of BorrowWell's commitment to the protection of customers' personal information. And as predicted, enrollment was significantly lower in the condition with the detailed description of privacy protections than in the control condition that included only a privacy policy link. And so these results suggest that prominently displaying detailed privacy protections can drive consumers away, which could end up costing BorrowWell hundreds of thousands of dollars per year in lost revenue.
Starting point is 00:06:49 We conducted this study over a seven-day period, and so if you extrapolate, that's kind of the estimate for what they could stand to lose. One of the things I thought was interesting is that you found that while people might be less willing to buy something after seeing a privacy notice, their perception of the value of that product didn't actually change. Did that surprise you? Yeah, I think, you know, the thing that surprised me the most is that consumers are more likely to purchase from a company that makes no promises regarding the protection of consumer privacy than from one that is that a privacy notice places legally enforceable limits on a firm's data practices. It communicates safeguards and it might be protected. It might be expected to promote confidence that one's personal data will not be misused. But, you know, as I said, instead of making people feel more secure, we found that it that it does undermine trust and purchase interest. And yeah, it doesn't change the value, but it does change the willingness that they have to pay for that product. And I was also surprised that something as seemingly trivial
Starting point is 00:07:56 as including benevolence cues in the privacy notice, these subtle changes that we make to the language, could counter the negative effects. Yeah. Were there any significant differences between generations or genders? No. So we looked at age and gender as covariates, meaning, you know, we tried to see if there were differences across those variables and we didn't find any. I don't often laugh when I'm reading scientific journals or scientific papers, but I did chuckle a little bit because one of the test variations that you did that I thought was clever, you know, we've talked about sort of the two A, B tests that you've done before with this financial services, but one of your tests included a third option beyond there's a privacy
Starting point is 00:08:42 policy link, and I read it, and there was no privacy policy link at all. And that third option was that you had a link to a privacy policy, but when people clicked it, the web browser just barfed back a file not found error. So people were aware that there was a privacy policy, but they didn't get to read it. How did that change people's purchase intent? Yeah, so I think, you know, that was actually a study that didn't make it into the published paper. That was one of the earlier studies that we ran. And, you know, one of the reasons it didn't make it into the published paper is because I think one issue could have been that people are thinking there might be some kind of problem with the site, right? If they can't get a link to their privacy policy to work properly, then maybe there's other incompetence in their ability to manage my personal data. And so that was kind of an alternative explanation for the results of that study. And so we ran some subsequent studies to be cleaner tests that wouldn't be susceptible to that alternative explanation.
Starting point is 00:09:52 Do you have business insurance? If not, how would you pay to recover from a cyber attack, fire damage, theft, or a lawsuit? No business or profession is risk-free. Without insurance, your assets are at risk from major financial losses, data breaches, and natural disasters. Get customized coverage today, starting at $19 per month at zensurance.com. Be protected.
Starting point is 00:10:15 Be Zen. You know, a lot of people who are listening to the podcast, people who manage e-commerce sites and so on, they don't have control, this level of granularity of control over whether there's a privacy box, what it says, that sort of thing. So for those people, I'm thinking people who use kind of like a preset theme in Shopify or something like that. For those people, is there any way to counter the loss in purchase intent? Yeah, that's a good question. I think, you know,
Starting point is 00:10:48 anything that you can do to build consumer trust and to let them know that you care about them, that you're committed to, you know, not only competently protecting their privacy, but also that you have their best interest in mind and at heart. I think any kind of cues that you can give along those lines should be effective. But, you know, you're sometimes limited by the platform in terms of the extent that you can use to, you know, communicate these cues. Yeah. Well, let's go the other way. Like if someone has full control over their site and they can choose whether a privacy notice appears or doesn't appear, is it your finding that they should just not show one? No, I would say that the finding is if you
Starting point is 00:11:37 incorporate benevolence cues into your privacy policy, we found that in some cases it can actually be beneficial. So it can actually increase purchase intent beyond what it would be in the absence of any privacy communication. The downside or the thing you want to avoid is having a privacy notice that does not include benevolence queues. And as part of the research, one of the things that we did is we looked at a random sample of privacy notices of companies listed on the NASDAQ stock exchange. And we found that benevolence cues were, in fact, quite rare. that communicates caring and fosters consumer trust so that consumers are more willing to provide that information and do business with the companies. But the companies are not discouraged from being transparent in what they're doing with the customers' personal data.
Starting point is 00:12:39 So what would be the perfect, if you were VP of policy or VP of privacy or whatever for an e-commerce company and the CEO said, you've got a day, design for me the perfect privacy apparatus as it is forward facing to the consumer. What does it look like? Is it a box? Is it a pop-up? How big is it? Tell me the words to use.
Starting point is 00:13:03 Yeah, that's the million dollar question, right? If it is, or more. So I think that, you know, there's obviously no, you know, solution that fits all different situations. And I think some of that's going to be dictated by the situation and the context. But I think the key results from our research are do things that build consumer trust. And so, you know, in addition to conveying that you will protect their information, make sure that you're communicating how much you care about their privacy and how much you care about them. But I think, you know, from other privacy research that I'm familiar with that other people have conducted, I think there are a lot of best practices out there in terms of being very concise, trying to avoid jargon that people aren't going to understand. and explaining to them why you're collecting this data, how it will be used, and what the benefits are to them
Starting point is 00:14:08 of your collecting this information. So if you're collecting a particular piece of information, explaining that this might allow you to customize the product or the experience to their needs, right? That can be a way to help. What surprised you the most about your findings? Well, like I said earlier, I think, you know, one of the biggest surprises was just the fact that people would be so willing to give up their personal data without any promise that it will be protected.
Starting point is 00:14:49 When I first started doing this research, I looked at some of the most popular apps on the App Store. And this was before there was regulation that required them to have privacy policies. And some of the most popular apps for finance or for fitness, where you're entering personal health information or medical conditions or things like that, where you're entering personal health information or medical conditions or things like that, or you're entering financial data, there were no privacy policies on those apps. And I thought that was shocking, frankly. And then the other thing that I think is surprising, like I said earlier, is that I think just changing the language slightly can reduce these negative effects that we've observed of bringing privacy information kind
Starting point is 00:15:31 of to the forefront of people's minds. It's interesting because, you know, I think a lot of people in the industry, I mean, obviously they're used to multivariate testing. And there's lots of things that we test. There's image, There's the color of buttons. You know, Google once tested 32 different shades of blue for their hyperlinks. I don't know that many people would consider testing the privacy portion of that. And yet, as you discussed, you know, it's pretty critical to the whole thing. What made you want to study this? Yeah, so I think part of it was, you know, noticing this about the apps. I've done some other privacy research, you know, so I have a couple of recently published papers where we look
Starting point is 00:16:13 at the implications of the pandemic for privacy. One effect of the pandemic is that there's been this large pool of personal data that's been generated that was not previously available. And that's partly due to increased collecting and sharing of consumer information by governments and businesses, but it's also partly due to an increase in online activities and voluntary self-disclosure by people who are isolated. And we identify some opportunities, challenges, and open questions that this poses for both consumers and marketers. In another paper, we look at the need to consider both individuals' motivation to protect their personal information, but also their knowledge of how to do so. A lot of the research in privacy looks either at motivation or at knowledge, but not at both. And in fact, many consumers are fairly privacy illiterate.
Starting point is 00:17:06 They're not able to accurately predict how they will respond to privacy threats. And so in order to do that, we need to consider not only their motivation, but also their familiarity with privacy related issues. So to answer your question, you know, privacy has been something that I've been interested in for a while now and working on it from several different angles. And that's kind of what got me thinking about privacy notices. As I said, I'm an advocate of transparency and privacy practices. I think it's ethical for companies to disclose how they are going to be using consumers' personal information. And as a consumer, I want my personal information to be protected.
Starting point is 00:17:46 And I think there's a lot of benefits that I can get by providing it. But I want to make sure that I know how they're going to be using it, how they will be protecting it. And so I think privacy notices are important. And I think that as our research shows, they can be very influential in influencing consumer purchases. I'm curious, given that your research sort of focuses around privacy and the web and e-commerce and so on, has your research or your experience in this changed the way that you move through the web as a consumer? You know, it has a little bit, but I'm like everyone else, I think, where I often don't read privacy notices all the way through, especially if they're long and full of technical jargon. But I have become more aware of it, I think. I've been particularly more aware of their
Starting point is 00:18:38 absence, right? And I think that's the thing that a lot of people, you know, they're just, when they're shopping, they're not always thinking about privacy. And so that's the thing that a lot of people, when they're shopping, they're not always thinking about privacy. And so that's the thing that kind of started us off on doing this research is that the absence of a privacy notice doesn't usually send up red flags to consumers, but it should. Because what that means is they're making no promises. They could be collecting any data from you and making no promises about how it'll be protected or used. And so I think privacy notices are there to protect us. And so I just want to make sure that companies
Starting point is 00:19:16 have a way of communicating that in a way that won't hurt their business because otherwise they're essentially given an incentive not to convey that information, which I think hurts, you know, consumers overall. I hate to say it. I'm one of those people who when I arrive at a website, and it has the privacy banner, probably GDPR inspired, you know, where where there's a big accept everything button, and then a big customize your choices button. And then, you know, I usually click that. I like to think I'm privacy aware. I run the Brave browser.
Starting point is 00:19:47 I run a VPN on all my devices. But yet that accept all button is so tantalizingly easy to click. Maybe this will eventually change all of us. It's certainly interesting research. I'm super delighted that you could share it with us. Aaron Brough is an associate professor of marketing at the John M. Huntsman School of Business at Utah State University. His study is called The Bulletproof Glass Effect, Unintended Consequences of Privacy Notices. Dr. Brough, thank you for joining us. Thank you, Todd.

There aren't comments yet for this episode. Click on any sentence in the transcript to leave a comment.