







This Review summarizes and draws connections between diverse streams of empirical research on privacy behavior. We use three themes to connect insights from social and behavioral sciences: people's uncertainty about the consequences of privacy-related behaviors and their own preferences over those consequences; the context-dependence of people's concern, or lack thereof, about privacy; and the degree to which privacy concerns are malleable—manipulable by commercial and governmental interests. Organizing our discussion by these themes, we offer observations concerning the role of public policy in the protection of privacy in the information age.
You Really Do Have Some Expectation of Privacy in Public
When we spend time fighting the growing ubiquity of both public and private surveillance cameras we often hear a familiar refrain: “you don’t have an expectation of privacy in public.” This is not

A Cypherpunk's Manifesto
Privacy is necessary for an open society in the electronic age. Privacy is not secrecy. A private matter is something one doesn't want the whole world to know, but a secret matter is something one doesn't want anybody to know. Privacy is the power to selectively reveal oneself to the world.
Unwillingness to pay for privacy: A field experiment
We measure willingness to pay for privacy in a field experiment. Participants bought at most one DVD from one of two competing online stores. One store consistently required more sensitive personal data than the other, but otherwise the stores were identical. In one treatment, DVDs were one Euro cheaper at the store requesting more personal information, and almost all buyers chose the cheaper store. Surprisingly, in the second treatment when prices were identical, participants bought from both shops equally often.
How (Not) to Write a Privacy Law
After many years of failed starts, proposed information privacy legislation has begun moving forward in both houses of Congress. The docket in the recently ended 116th Congress was crowded, with a number of different proposals jostling for attention and no agreement on which deserved to be the front runner. Even so, as the 117th Congress begins, there is growing inside-the-Beltway consensus on the list of features that a successful bill will need to include. This paper critically assesses those zones of emerging consensus.

Measuring the Privacy Experience
How do you know that a product respects your privacy – other than by wading through the fine print? We’ve created a framework to measure the way people actually experience privacy in tech products.

Why privacy is important, and having "nothing to hide" is irrelevant
The governments of Australia, Germany, the UK and the US are destroying your privacy. Some people don't see the problem...
Online Age Verification: Government Legislation, Supplier Responsibilization, and Public Perceptions
There are widespread concerns about the online harms to children operating online. As such, governments have enacted laws to require online service providers to deploy age verification to prevent such harms. We investigate the following three research questions regarding this topic: (1) To what extent have different governments legislated age verification controls? (2) Do governments embrace a responsibilization strategy when it comes to online age verification? and (3) How does the UK public feel about online age verification legislation? We find that governments are applying a responsibilization strategy, which has led to widespread deployment of privacy-invasive or ineffective age verification. The former violates the privacy of underage users, with the latter undermining the overarching aims of the legislation. We have also found general disengagement and a lack of trust in the government amongst the public with regards to new online age verification laws within the UK. To conclude, despite governments globally looking to put more robust online age verification mechanisms in place, there remains a general lack of privacy preservation and affordable technological solutions. Moreover, the overarching aims of the online safety and age verification legislative changes may not be satisfied due to the general public stakeholder group's disengagement and lack of trust in their government.

The Age Verification Privacy Paradox: Why Document Uploads Hurt Everyone—and How World Solves It
Age verification is now required by many digital platforms worldwide, but most systems create new risks for user data and privacy. This article explores why document-based age verification exposes everyone to greater risk—and how privacy-first technology like World ID offers a safer path for consumers and platforms.

Privacy, human rights, and Tornado Cash
I am more worried about privacy than crypto crime.

Privacy Principles
Privacy is an essential part of the web. This document provides definitions for privacy and related concepts that are applicable worldwide as well as a set of privacy principles that should guide the development of the web as a trustworthy platform. People using the web would benefit from a stronger relationship between technology and policy, and this document is written to work with both.
Privacy Principles
Privacy is an essential part of the web. This document provides definitions for privacy and related concepts that are applicable worldwide as well as a set of privacy principles that should guide the development of the web as a trustworthy platform. People using the web would benefit from a stronger relationship between technology and policy, and this document is written to work with both.
Disclosure: Psychology Changes Everything
We review literature examining the effects of laws and regulations that require public disclosure of information. These requirements are most sensibly imposed in situations characterized by misaligned incentives and asymmetric information between, for example, a buyer and seller or an advisor and advisee. We review the economic literature relevant to such disclosure and then discuss how different psychological factors complicate, and in some cases radically change, the economic predictions. For example, limited attention, motivated attention, and biased assessments of probability on the part of information recipients can significantly diminish, or even reverse, the intended effects of disclosure requirements. In many cases, disclosure does not much affect the recipients of the information but does significantly affect the behavior of the providers, sometimes for the better and sometimes for the worse. We review research suggesting that simplified disclosure, standardized disclosure, vivid disclosure, and social comparison information can all be used to enhance the effectiveness of disclosure policies.

What Would Online Age Verification Mean for Speech, Privacy, and Youth Online Safety?
Hack of Age Verification Company Shows Privacy Danger of Social Media
We’ve said it before: online age verification is incompatible with privacy. Companies responsible for storing or processing sensitive documents like drivers’ licenses are likely to encounter data
A Duty of Loyalty for Privacy Law
Data privacy law fails to stop companies from engaging in self-serving, opportunistic behavior at the expense of those who trust them with their data. This is a
Exploring Privacy-Preserving Age Verification: A Close Look at Zero-Knowledge Proofs
A path toward protecting young people online that doesn’t sacrifice their privacy or data security, amid persistent concerns about screen time.
