Privacy policies and consumer data extraction: evidence from US firms

Tarun Ramadorai, Antoine Uettwiller and Ansgar Walther

Review of Finance, 2025, vol. 29, issue 5, 1337-1367

Abstract: Using a comprehensive dataset of privacy policies, firm characteristics, consumer tracking, and cybersecurity incidents, we document several stylized facts about the heterogeneity of firms’ data extraction practices and the influence of privacy regulations. Rather than adopting standardized boilerplate privacy policies, we find substantial within-industry differences correlated with firms’ technical sophistication; firms engaging in data extraction have lengthier policies, seeking to hedge legal risks. Firms with intermediate technical sophistication appear to follow a “collect and share” model, collecting large amounts of consumer data and sharing it with third parties for processing, thus creating cybersecurity risks. Conversely, high sophistication firms appear to implement a “receive and process” model, consistent with a two-tier data market in which data flow from intermediate to high sophistication firms.

Keywords: privacy; data markets; web tracking; third-party sharing; cybersecurity risk (search for similar items in EconPapers)
JEL-codes: D8 K2 L1 (search for similar items in EconPapers)
Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
http://hdl.handle.net/10.1093/rof/rfaf017 (application/pdf)
Access to full text is restricted to subscribers.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:oup:revfin:v:29:y:2025:i:5:p:1337-1367.

Ordering information: This journal article can be ordered from
https://academic.oup.com/journals

Access Statistics for this article

Review of Finance is currently edited by Marcin Kacperczyk

More articles in Review of Finance from European Finance Association Oxford University Press, Great Clarendon Street, Oxford OX2 6DP, UK. Contact information at EDIRC.
Bibliographic data for series maintained by Oxford University Press ().