Digital Privacy

• 成果类型: Article
• 署名作者: Fainmesser, Itay P.; Galeotti, Andrea; Momot, Ruslan
• 署名单位: Johns Hopkins University; Johns Hopkins University; University of London; London Business School; University of Michigan System; University of Michigan; Northwestern University
• 刊物名称: MANAGEMENT SCIENCE
• ISSN/ISSBN: 0025-1909
• DOI: 10.1287/mnsc.2022.4513
• 发表日期: 2023
• 页码: 3157-3173
• 关键词: privacy; data security; Online platforms; ECONOMICS; game theory and bargaining theory

摘要

We study the incentives of a digital business to collect and protect users' data. The users' data the business collects improve the service it provides to consumers, but they may also be accessed, at a cost, by strategic third parties in a way that harms users, imposing endogenous users' privacy costs. We characterize howthe revenuemodel of the business shapes its optimal data strategy: collection and protection of users' data. A business with a more data-driven revenue model will collect more users' data and providemore data protection than a similar business that is more usage driven. Consequently, if users have small direct benefit from data collection, then more usage-driven businesses generate larger consumer surplus than their more data-driven counterparts (the reverse holds if users have large direct benefit from data collection). Relative to the socially desired data strategy, the business may over- or undercollect users' data and may over- or underprotect it. Restoring efficiency requires a two-pronged regulatory policy, covering both data collection and data protection; one such policy combines a minimal data protection requirement with a tax proportional to the amount of collected data. We finally show that existing regulation in the United States, which focuses only on data protection, may even harm consumer surplus and overall welfare.