Privacy-Aware Decision Making: The Effect of Privacy Nudges on Privacy Awareness and the Monetary Assessment of Personal Information

Nowadays, smartphones are equipped with various sensors collecting a huge amount of sensitive personal information about their users. However, for smartphone users, it remains hidden, and sensitive information is accessed by used applications and data requesters. Moreover, governmental institutions have no means to verify if applications requesting sensitive informa-tion are compliant with the General Data Protection Directive (GDPR), as it is infeasible to check the technical details and data requested by applications that are on the market. Thus, this research aims to shed light on the compliance analysis of applications with the GDPR. Therefore, a multidimensional analysis is applied to analyzing the permission requests of applications and empirically test if the information provided about potentially dangerous permissions influences the privacy awareness and their willingness to pay or sell personal data of users. The use case of Google Maps has been chosen to examine privacy awareness and the monetary assessment of data in a concrete scenario. The information about the multidimensional analysis of the permission requests of Google Maps and the privacy consent form is used to design privacy nudges to inform users about potentially harmful permission requests that are not in line with the GDPR. The privacy nudges are evaluated in two crowdsourcing experiments with overall 426 participants, showing that information about harmful data collection practices increases privacy awareness and also the willingness to pay for the protection of personal data.