Digital Privacy
Itay P. Fainmesser (),
Andrea Galeotti and
Ruslan Momot ()
Additional contact information
Itay P. Fainmesser: The Johns Hopkins Carey Business School, The Johns Hopkins University, Baltimore, Maryland 21202; Department of Economics, The Johns Hopkins University, Baltimore, Maryland 21202
Ruslan Momot: Technology and Operations Department, The Ross School of Business, The University of Michigan, Ann Arbor, Michigan 48109; Operations Department, The Kellogg School of Management, Northwestern University, Evanston, Illinois 60208
Management Science, 2023, vol. 69, issue 6, 3157-3173
Abstract:
We study the incentives of a digital business to collect and protect users’ data. The users’ data the business collects improve the service it provides to consumers, but they may also be accessed, at a cost, by strategic third parties in a way that harms users, imposing endogenous users’ privacy costs. We characterize how the revenue model of the business shapes its optimal data strategy: collection and protection of users’ data. A business with a more data-driven revenue model will collect more users’ data and provide more data protection than a similar business that is more usage driven . Consequently, if users have small direct benefit from data collection, then more usage-driven businesses generate larger consumer surplus than their more data-driven counterparts (the reverse holds if users have large direct benefit from data collection). Relative to the socially desired data strategy, the business may over- or undercollect users’ data and may over- or underprotect it. Restoring efficiency requires a two-pronged regulatory policy, covering both data collection and data protection; one such policy combines a minimal data protection requirement with a tax proportional to the amount of collected data. We finally show that existing regulation in the United States, which focuses only on data protection, may even harm consumer surplus and overall welfare.
Keywords: privacy; data security; online platforms; economics; game theory and bargaining theory (search for similar items in EconPapers)
Date: 2023
References: View references in EconPapers View complete reference list from CitEc
Citations:
Downloads: (external link)
http://dx.doi.org/10.1287/mnsc.2022.4513 (application/pdf)
Related works:
Working Paper: Digital Privacy (2020)
Working Paper: Digital Privacy (2019) 
This item may be available elsewhere in EconPapers: Search for items with the same title.
Export reference: BibTeX
RIS (EndNote, ProCite, RefMan)
HTML/Text
Persistent link: https://EconPapers.repec.org/RePEc:inm:ormnsc:v:69:y:2023:i:6:p:3157-3173
Access Statistics for this article
More articles in Management Science from INFORMS Contact information at EDIRC.
Bibliographic data for series maintained by Chris Asher ().