In a new study by a UConn communication professor and co-authors, hundreds of university students agreed to give up their first-born child and turn their personal data over to the National Security Agency in return for access to what they thought was a new social networking site.<\/p>\n
The study is believed to be one of the first to empirically prove what many have long suspected \u2013 most people simply don\u2019t bother reading the dense terms of service and privacy policies they encounter on the Internet. In fact, many have come to view the policies as a necessary but inconvenient step delaying their quest to download such things as the latest mobile app, videogame, or dating site.<\/p>\n
The fact that so many of us automatically click on the \u201cI agree to these terms and conditions\u201d tab without fully appreciating what we are doing could be viewed as \u201cthe biggest lie on the Internet,\u201d the study\u2019s authors say.<\/p>\n
\u201cThis study shows that the ‘notice and choice’ practice, where companies notify individuals about the data that is to be collected from them, and then individuals can make an informed choice is broken,\u201d says Anne Oeldorf-Hirsch, assistant professor of communication at UConn, who co-authored the study. Jonathan Obar from York University in Toronto served as the lead author.<\/p>\n
The findings are compelling, considering that most of us value our privacy and want to protect it. But that caution, the study revealed, goes by the wayside when it comes to our engagement on the Internet.<\/p>\n
It\u2019s called the ‘privacy paradox.’<\/p>\n
\u201cThe privacy paradox is basically the idea that we say one thing and do another when it comes to privacy,\u201d says Oeldorf-Hirsch. \u201cIndividuals may state that privacy is important and that they are interested in protecting their information, but their behavior does not corroborate those intentions. People generally share more information or share it more widely than they claim to.\u201d<\/p>\n
\nIt\u2019s a hassle to deal with a massive amount of boring pages about privacy and security … — Study participant<\/cite><\/p>\n<\/blockquote>\n
In the study, 543 undergraduate students \u2013 who were communication students no less \u2013 were told their university had been asked to evaluate a new social networking site known as NameDrop. The site was completely fictitious. In order to access the site, students were asked to give their consent to specific terms of service and privacy policies as part of the sign-up process.<\/p>\n
The policies, between 4,000 and 8,000 words long, were patterned after those found on popular sites like LinkedIn and Facebook, except they were modified to include \u201cgotcha\u201d clauses to see if readers were paying close attention. One clause said that any and all data collected by NameDrop may be shared with third parties including the U.S. National Security Agency, and that this could impact an individual\u2019s future employment, ability to receive a bank loan, and entrance into a university. Another clause included in the terms of service agreement stated that participants, by accepting the terms, would give up their first-born to NameDrop in addition to any monetary payment. If they did not yet have children, the agreement was enforceable until 2050.<\/p>\n
Ninety-eight percent of the participants agreed to the child assignment clause and the data-sharing policy without raising any concerns.<\/p>\n
Drilling deeper, the results revealed that 74 percent of the students skipped reading the privacy policy, selecting instead a quick “join\u201d option that allowed them to bypass the policies. Those that did bother to scan the policy spent about a minute doing so when, the researchers determined, it would take the average adult reader about 30 minutes to read it in its entirety. When it came to the Terms of Service, 86 percent of the students spent less than a minute reading it.<\/p>\n
Of all the students who participated, only nine mentioned the child assignment clause and 11 raised concerns about data sharing, with only one person specifically mentioning the NSA.<\/p>\n
Some of the comments from the study\u2019s participants confirmed what researchers suspected were the reasons people were not paying attention to the policies.<\/p>\n
“It\u2019s a hassle to deal with a massive amount of boring pages about privacy and security when the site you are joining is there to do something much more interesting,\u201d one student wrote.<\/p>\n
\u201cIt feels like a cultural norm not to read them, and I\u2019m too lazy to read them in detail,\u201d another student said.<\/p>\n
As far back as 2007, then-FTC Commissioner Jon Lebowitz expressed doubt about the effectiveness of such policies. \u201cInitially, privacy policies seemed like a good idea,\u201d Lebowitz said at an FTC Town Hall Meeting on the technology. \u201cBut in practice, they often leave a lot to be desired. In many cases, consumers don\u2019t notice, read, or understand the privacy policies.\u201d<\/p>\n
Yet nearly 10 years later, not much has changed.<\/p>\n
\u201cOur study shows that much more needs to be done to improve the consent process when individuals sign up for social media sites and digital services,\u201d Oeldorf-Hirsch says. \u201cThe ongoing conversation about these policy issues suggests that very little is being done to accomplish that. We hope that our definitive evidence that these policies are being ignored makes it clear that newer ideas about how to inform citizens about the services they use are needed.\u201d<\/p>\n
At a time when there is growing concern about the use and potential misuse of big data, data mining, and the sharing of client information across industries, Oeldorf-Hirsch says it is especially important that people remain vigilant when agreeing to terms of service online.<\/p>\n
\u201cBeyond understanding what information is collected and where it is going, the biggest reason to pay close attention to these policies is eligibility determinations,\u201d she says. \u201cIncreasingly, data collected by these companies are being used to create digital dossiers, which are being used to make decisions about who gets into universities, who gets to cross the board, who gets a bank loan at what rate, etc.\u201d<\/p>\n
But she admits that simply encouraging people to take the time to read the policies closely isn\u2019t enough, given the study\u2019s findings. Asking individuals to develop a better understanding of the current privacy landscape may be more realistic.<\/p>\n
\u201cWe suggest that people engage more in the unfolding debate about digital privacy and reputation,\u201d Oeldorf-Hirsch says. \u201cThis includes choosing Internet service providers and mobile carriers that care about privacy, educating others about the issues, and contacting policymakers to let them know more needs to be done.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"
A new study shows most people don\u2019t read the fine print when agreeing to terms of service on the Internet.<\/p>\n","protected":false},"author":12,"featured_media":115708,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_crdt_document":"","wds_primary_category":0,"wds_primary_series":0,"wds_primary_attribution":0,"footnotes":""},"categories":[2226,2225],"tags":[],"magazine-issues":[],"coauthors":[1928],"class_list":["post-114638","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-clas","category-uconn-storrs"],"pp_statuses_selecting_workflow":false,"pp_workflow_action":"current","pp_status_selection":"publish","acf":[],"publishpress_future_action":{"enabled":false,"date":"2026-04-18 17:16:50","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/today.uconn.edu\/wp-rest\/wp\/v2\/posts\/114638","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/today.uconn.edu\/wp-rest\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/today.uconn.edu\/wp-rest\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/today.uconn.edu\/wp-rest\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/today.uconn.edu\/wp-rest\/wp\/v2\/comments?post=114638"}],"version-history":[{"count":13,"href":"https:\/\/today.uconn.edu\/wp-rest\/wp\/v2\/posts\/114638\/revisions"}],"predecessor-version":[{"id":116131,"href":"https:\/\/today.uconn.edu\/wp-rest\/wp\/v2\/posts\/114638\/revisions\/116131"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/today.uconn.edu\/wp-rest\/wp\/v2\/media\/115708"}],"wp:attachment":[{"href":"https:\/\/today.uconn.edu\/wp-rest\/wp\/v2\/media?parent=114638"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/today.uconn.edu\/wp-rest\/wp\/v2\/categories?post=114638"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/today.uconn.edu\/wp-rest\/wp\/v2\/tags?post=114638"},{"taxonomy":"magazine-issue","embeddable":true,"href":"https:\/\/today.uconn.edu\/wp-rest\/wp\/v2\/magazine-issues?post=114638"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/today.uconn.edu\/wp-rest\/wp\/v2\/coauthors?post=114638"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}