Are data privacy concerns driving consumer behavior? Not yet.
Rising digital activity suggests many may be overstating their worries
Paul Lee
Roxana Corduneanu
Joanna (Joey) Conway
Suhas Raviprakash
Data-sharing is both fuel and lubricant to the world’s economy. It powers online and offline business models, and it enables, in the form of cookies and browser history, greater ease of use for consumers. But with every year, as more data—in terms of volume, types, and richness—is shared, the potential for its misuse is rising. The 2021 Deloitte Digital Consumer Trends Survey,1 which polled around 33,150 respondents in 20 countries about their online activities and their views on data privacy, shows that many surveyed consumers are well aware of the risks—but are continuing to expand their online activity nonetheless.
Privacy is hard to understand and often cumbersome to manage
Thirty years ago, understanding personal digital data was relatively straightforward, as it was typically stored on physical media that could be touched, locked away, and, if needed, visibly destroyed. There were no smartphones capturing and emitting location data. There were no cameras in laptop lids, as computing was still predominantly desktop. Cars did not have GPS systems to track and capture journey data by default.
In stark contrast, the ways in which data is collected, shared, and analyzed in a world of cloud computing are increasingly perplexing to the average user, and the implications may not always be evident. It is hard enough for a consumer to understand how clicking on a link may trigger their personal data to be invisibly and noiselessly shared with hundreds of other sites, or how multiple instances of their browsing behavior may be stitched together in a remote data center. It may be more baffling still to understand why a robot vacuum cleaner may collect data on its owner’s home: The data may simply help the robot to do a better job of cleaning, but it could also be sold to carpet treatment companies to use for targeted advertising. And applications, such as facial recognition, can be utterly opaque to those without a technical background, as understanding them requires awareness of terminology such as “secure enclaves” (dedicated secure subsystems on a user’s device)2 or acronyms such as public key infrastructure (PKI).
For most of the world’s billions of digital users, understanding data privacy may prove to be too baffling and too much of a chore for them to make the effort. While many of those surveyed were aware that they should review terms and conditions and manage cookie settings,3 in the heat of the moment, actual behavior often lapses, and incaution may result. Reading a web page, buying a product, signing up to a service, or accessing a Wi-Fi hotspot quickly may take precedence over the tedious task of reading a long privacy disclosure or selecting which cookies to accept.4
Consumers’ privacy concerns belie their growing adoption of digital services
Consumers have several options on how to approach digital data sharing. A small minority will stay offline altogether; another minority will seek to be well informed about their digital behavior’s privacy implications. But the vast majority of consumers will largely simply trust, possibly out of apathy, that their data is in safe hands. They are unlikely to select devices, for example, primarily because of a vendor’s privacy approach. Indeed, on average,5 only 7% of respondents reported that data privacy and security were important considerations when deciding which smartphone to buy next.
Consumers may exhibit such trust even though a range of tools are available for them to manage data privacy. In markets governed by the General Data Protection Regulation (GDPR), which include most European countries, consumers are offered the ability to manage cookies. However, in these markets, the most common reported reaction among our respondents was to click on the default cookie settings, often denoted by the more colorful button offered of the two. Among the European countries surveyed,6 75% of respondents stated that they accepted default cookie settings at least half of the time. In reality, the proportion may be much higher.
As another example, consumers have the capability to decline app permissions. Only around one quarter of respondents claim that they always refuse permission, and only 28% refuse it more than half of the time.7
This is not because people do not know their data is out there. Our survey revealed that most consumers surveyed in multiple markets believe their data is being used “all of the time” or “most of the time.” Only 5% of our respondents thought that their data was not being used (figure 1).
What is more, a majority of consumers also responded that they are concerned about how companies they interact with online use their personal data. On average, two-thirds (66%) of our respondents stated that they had such concerns, although there was significant variation by country (figure 2). This proportion has remained more or less constant in every year in which the question has been asked.
But arguably, this concern may be superficial. It certainly has not slowed purchases of more devices or subscriptions to online services. For example, between 2020 and 2021, the adoption rate for subscription video-on-demand (SVOD) services increased by an average of 9 percentage points across a range of developed countries, representing hundreds of millions of people (figure 3). One survey of 22,000 people found that its respondents added an average of 15 accounts in the 12 months leading up to March 2021.8 All of these services are capturing subscribers’ viewing behaviors. This can enhance the consumer experience by helping providers better understand how content is watched and what should be recommissioned. But in the instances where a user is new to SVOD, or where a user has added a SVOD subscription, data is being captured that was previously not gathered and aggregated.
Indeed, thanks to the pandemic, a great deal of data that was not previously collected has been and will likely continue to be digitally captured. For example, as office work has gone online in the past two years, more meetings will likely have been recorded than before, as meetings that previously would have been conducted in person moved to video with recording available at the click of a button.
Every year brings expectations of behavioral shift due to concerns about privacy. Our survey found that 28% of this year’s respondents had stopped using a social media service temporarily or permanently over the prior 12 months,9 and of this group, 23% stated they had ceased usage because of data privacy concerns. At first glance, this data point may appear significant. However, data privacy was only the fourth most common factor for stopping using a social media service. The number-one reason was boredom with content, cited by 34% of respondents.
Moreover, we believe the number of social media users is increasing overall. One report estimated that 400 million new social media users joined between 2020 and 2021, pushing the number of users to 4.5 billion in total.10 In September 2021, TikTok announced its billionth global user,11 and Facebook reported 1.91 billion daily active users in June 2021, up 7% year over year.12
All this goes to show that stated concern and even reported actions, as indicated in surveys such as ours, may reflect over-claim by some respondents.
BY
Paul Lee
Roxana Corduneanu
Joanna (Joey) Conway
Suhas Raviprakash
The authors would like to thank Nick Seeber from Deloitte UK and Kirti Khattri from Deloitte Support Services India for their contributions to this article.