To Self-persuade or Be Persuaded: Examining Interventions for Users' Privacy Setting Selection

Title of the Paper

To Self-Persuade or be Persuaded: Examining Interventions for Users’ Privacy Setting Selection

Paper Information

• Subject Area: User privacy setting selection, social influence, and self-persuasion
• Keywords: Social network security, social influence, authority, reflective writing, privacy behavior, decision-making, individual differences, quantitative methods, qualitative methods

Research Background and Questions

• Research Question: Despite the continuous promotion of security and privacy (S&P) best practices, user adoption remains low. Existing studies suggest that social influence is an effective method for behavior modification, but prior research has mainly focused on social influence among acquaintances, neglecting broader non-personal social influence options.
• Significance: The increasing number of data breaches and the strong demand for online privacy protection make it crucial to study effective privacy intervention methods.
• Motivation and Related Work: This research is grounded in theories of bounded rationality and cognitive biases from behavioral economics, analyzing why users struggle to adhere to privacy best practices. Previous studies have focused on the effects of individual differences, social connections, and device interface design on privacy behavior. This study explores two novel intervention methods—non-personal social influence (e.g., recommendations from the public or experts) and reflective writing—and examines their effectiveness and interactive effects.

Proposed Solution

• Proposed Methods:
  1. Non-Personal Social Influence: Providing privacy setting recommendations through public or expert endorsements.
  2. Reflective Writing: Encouraging users to engage in reflective writing before configuring privacy settings, helping them make more autonomous decisions.
• Innovations:
  1. Combining non-personal social influence with reflective writing for privacy setting selection.
  2. Expanding social influence research by shifting the target group from acquaintances to the public and experts.
  3. Leveraging writing activities to stimulate user self-reflection, reducing mechanical compliance with external recommendations.
• Implementation Steps:
  1. Selecting Facebook as the experimental platform (widely used and featuring complex privacy settings).
  2. Conducting a questionnaire-based experiment to investigate user choices for 14 S&P settings, using a 2 (reflective writing) × 4 (social influence recommendation sources) mixed experimental design.
  3. Comparing the effects of four influence sources (expert recommendations, public recommendations, Facebook default settings, no recommendations) and reflective writing on users’ privacy configuration decisions.

Research Findings

• Specific Findings:
  1. In the experiment, non-personal social influence recommendations from experts and the public significantly increased the likelihood of users adopting privacy best practices.
  2. Reflective writing weakened the effect of social influence recommendations but encouraged users to choose safer privacy configurations (e.g., safer than Facebook’s default recommendations).
• Advantages and Contributions:
  1. Practical Feasibility: Non-personal social influence recommendations represent a scalable and cost-effective intervention method, providing users with safer configuration suggestions.
  2. Potential of Reflective Writing: Reflective writing not only improved privacy behavior but also showed potential to resist manipulative designs (e.g., dark patterns) influencing users’ privacy choices.
  3. Analysis of Individual Differences: The study identified the influence of users’ collective identity and Facebook usage habits on their acceptance of recommendations, offering insights for future personalized privacy intervention designs.
• Experimental Results:
  1. Users were more likely to accept public and expert recommendations (non-personal social influence) over Facebook default settings.
  2. Privacy settings chosen after reflective writing demonstrated higher levels of privacy protection, even when inconsistent with social recommendations.
  3. Under experimental conditions involving reflective writing, users were more likely to select settings aligned with expert recommendations.
• Limitations and Future Directions:
  1. Limitations: Sample bias (skewed toward younger and male users), lack of testing for intervention effects in real-life scenarios, and insufficient comparison between personal and non-personal social influence.
  2. Future Directions:
     • Explore more effective combinations of reflective writing and other intervention methods.
     • Test the methods across different platforms and international user groups.
     • Investigate the potential of reflective writing to resist negative designs (e.g., dark patterns).

Summary and Recommendations

This study demonstrates that non-personal social recommendations from experts and the public, as well as reflective writing, are effective methods for improving users’ privacy setting choices. Future research could further explore how to optimize the application of these two intervention methods and validate their applicability across broader user groups.