{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,5]],"date-time":"2026-05-05T13:31:05Z","timestamp":1777987865109,"version":"3.51.4"},"reference-count":156,"publisher":"American Accounting Association","issue":"2","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011,11,1]]},"abstract":"<jats:title>ABSTRACT<\/jats:title><jats:p>The information privacy of consumers is an important public policy issue in today's society, and one that businesses, industries, and governments are continuing to struggle with as information technology (IT) innovations create ever-stronger impacts. In this article, we explore consumer information privacy issues and review the results of related prior research. We provide a survey of the literature on information privacy based on our assessment from: (1) the societal and public policy perspective, (2) the business practices perspective, and (3) the individual privacy and consumer behavior perspectives that relate to the disclosure of private information by individuals to firms. From the societal and public policy perspective, we identify a number of research directions that relate to the social welfare implications of personal information surveillance, the safeguards needed at the societal level, and the nature of privacy-enhancing regulations. From the business practices perspective, we suggest other research directions that involve the examination of factors influencing organizational choices of privacy practices. We also offer some ways to discover how organizations can leverage their investments in information privacy. The individual and consumer behavior perspective, in turn, prompts Accounting Information Systems (AIS) researchers to look at the nature of people's beliefs and attitudes about privacy; the ways such attitudes affect their intentions and behaviors; and how individuals' behaviors can be influenced by organizational privacy policies and practices. The main contribution of this article is to understand these issues and identify opportunities for AIS researchers to enrich the current body of knowledge on this critical topic.<\/jats:p>","DOI":"10.2308\/isys-10091","type":"journal-article","created":{"date-parts":[[2011,12,2]],"date-time":"2011-12-02T06:14:21Z","timestamp":1322806461000},"page":"47-79","source":"Crossref","is-referenced-by-count":26,"title":["A Survey of Consumer Information Privacy from the Accounting Information Systems Perspective"],"prefix":"10.2308","volume":"25","author":[{"given":"Robert J.","family":"Kauffman","sequence":"first","affiliation":[{"name":"Dartmouth College and Singapore Management University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yong J.","family":"Lee","sequence":"additional","affiliation":[{"name":"Arizona State University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Marilyn","family":"Prosch","sequence":"additional","affiliation":[{"name":"Arizona State University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Paul J.","family":"Steinbart","sequence":"additional","affiliation":[{"name":"Arizona State University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1112","published-online":{"date-parts":[[2011,11,1]]},"reference":[{"key":"2023021421135391400_","unstructured":"Acquisti, A., A. Friedman, and R. Telang. 2006. Is There a Cost to Privacy Breaches? An Event Study. Proceedings of the 27th Annual International Conference on Information Systems, Milwaukee, WI."},{"key":"2023021421135391400_","unstructured":"Acquisti, A., and J. Grossklags. 2005. Uncertainty, Ambiguity, and Privacy. Proceedings of the 4th Workshop on Economics and Information Security, Carnegie-Mellon University, Pittsburgh, PA."},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"515","DOI":"10.1145\/76894.76895","article-title":"Security-control methods for statistical databases: A comparative study","volume":"21","author":"Adam","year":"1989","journal-title":"ACM Computing Surveys"},{"issue":"Winter","key":"2023021421135391400_","first-page":"1","article-title":"Over the rainbow: European and American consumer protection policy and remedy conflicts on the Internet and a possible solution","volume":"4","author":"Aguilar","year":"1999","journal-title":"International Journal of Communications of Law and Policy"},{"issue":"6","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"1001","DOI":"10.1287\/mnsc.1050.0390","article-title":"Research note: Customer intimacy and cross-selling strategy","volume":"51","author":"Akcura","year":"2005","journal-title":"Management Science"},{"key":"2023021421135391400_","unstructured":"Alderman, E., and C. Kennedy. 1995. The Right to Privacy. New York, NY: Alfred A. Knopf."},{"key":"2023021421135391400_","unstructured":"American Institute of Certified Public Accountants and the Canadian Institute of Chartered Accountants (AICPA\/CICA). 2003. Suitable Trust Services Criteria and Illustrations. New York, NY: AICPA\/CICA."},{"key":"2023021421135391400_","unstructured":"American Institute of Certified Public Accountants and the Canadian Institute of Chartered Accountants (AICPA\/CICA). 2004. Understanding and Implementing Privacy Services. New York, NY: AICPA\/CICA."},{"key":"2023021421135391400_","unstructured":"American Institute of Certified Public Accountants and the Canadian Institute of Chartered Accountants (AICPA\/CICA). 2006. Generally Accepted Privacy Principles: A Global Framework. New York, NY: AICPA\/CICA."},{"key":"2023021421135391400_","unstructured":"American Institute of Certified Public Accountants and the Canadian Institute of Chartered Accountants (AICPA\/CICA). 2009. Generally Accepted Privacy Principles: CPA and CA Practitioner Version. New York, NY: AICPA\/CICA."},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"339","DOI":"10.2307\/20650295","article-title":"Adoption of electronic health records in the presence of privacy concerns: The elaboration likelihood model and individual persuasion","volume":"33","author":"Angst","year":"2009","journal-title":"Management Information Systems Quarterly"},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"61","DOI":"10.4018\/jeco.2005100104","article-title":"Online privacy policies: An empirical perspective on self-regulatory practices","volume":"3","author":"Ashrafi","year":"2005","journal-title":"Journal of Electronic Commerce in Organizations"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"141","DOI":"10.1016\/j.elerap.2006.12.004","article-title":"The economics of mobile payments: Understanding stakeholder issues for an emerging financial technology application","volume":"7","author":"Au","year":"2008","journal-title":"Electronic Commerce Research and Applications"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"13","DOI":"10.2307\/25148715","article-title":"The personalization privacy paradox: An empirical evaluation of information transparency and the willingness to be profiled online for personalization","volume":"30","author":"Awad","year":"2006","journal-title":"Management Information Systems Quarterly"},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"623","DOI":"10.1111\/j.1540-5414.2006.00141.x","article-title":"A wavelet-based approach to preserve privacy for classification mining","volume":"37","author":"Bapna","year":"2006","journal-title":"Decision Sciences"},{"key":"2023021421135391400_","article-title":"Data theft or loss: Ten things your lawyer must tell you about handling information","author":"Bavis","year":"2007","journal-title":"Ivey Business Journal"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"25","DOI":"10.1145\/359205.359241","article-title":"On site: To opt-in or opt-out? It depends on the question","volume":"44","author":"Bellman","year":"2001","journal-title":"Communications of the ACM"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"56","DOI":"10.1145\/293411.293461","article-title":"TRUSTe: An online privacy seal program","volume":"42","author":"Benassi","year":"1999","journal-title":"Communications of the ACM"},{"key":"2023021421135391400_","article-title":"Information systems assurance","author":"Boritz","year":"2002","journal-title":"In Research Accounting as an Information Systems Discipline"},{"key":"2023021421135391400_","doi-asserted-by":"crossref","DOI":"10.2308\/isys-10090","article-title":"E-commerce and privacy: Exploring what we know and opportunities for future discovery","author":"Boritz","year":"2011","journal-title":"Journal of Information Systems"},{"issue":"36","key":"2023021421135391400_","first-page":"1361","article-title":"Strategic information management","volume":"7","author":"Breuning","year":"2008","journal-title":"Privacy and Security Law Report"},{"issue":"10","key":"2023021421135391400_","first-page":"1","article-title":"Privacy, security issues raised by cloud computing","volume":"8","author":"Breuning","year":"2009","journal-title":"Privacy and Security Law Report"},{"issue":"1","key":"2023021421135391400_","first-page":"62","article-title":"Investigating the relationship between Internet privacy concerns and online purchase behavior","volume":"5","author":"Brown","year":"2004","journal-title":"Journal of Electronic Commerce Research"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"23","DOI":"10.1080\/13600860220136084","article-title":"Global privacy concerns and regulation: Is the United States a world apart?","volume":"16","author":"Cain","year":"2002","journal-title":"International Review of Law, Computers & Technology"},{"key":"2023021421135391400_","unstructured":"Cate, F. H. 1997. Privacy in the Information Age. Washington, D.C.: Brookings Institution."},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"7","DOI":"10.1509\/jppm.19.1.7.16951","article-title":"Consumer online privacy: Legal and ethical issues","volume":"19","author":"Caudill","year":"2000","journal-title":"Journal of Public Policy & Marketing"},{"key":"2023021421135391400_","unstructured":"Cavoukian, A. 2009. Privacy by Design. Toronto, Canada: Information and Privacy Commission of Ontario."},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"69","DOI":"10.1080\/10864415.2004.11044320","article-title":"The effect of Internet security breach announcements on market value: Capital market reactions for breached firms and Internet security developers","volume":"9","author":"Cavusoglu","year":"2004","journal-title":"International Journal of Electronic Commerce"},{"issue":"6","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"574","DOI":"10.1109\/TSE.1982.236161","article-title":"Auditing and inference control in statistical databases","volume":"8","author":"Chin","year":"1982","journal-title":"IEEE Transactions on Software Engineering"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"60","DOI":"10.1145\/293411.293475","article-title":"Internet privacy concerns confirm the case for intervention","volume":"42","author":"Clarke","year":"1999","journal-title":"Communications of the ACM"},{"key":"2023021421135391400_","article-title":"Introduction to dataveillance and information privacy, and definitions of terms","author":"Clarke","year":"2006"},{"issue":"1","key":"2023021421135391400_","article-title":"Privacy impact assessment in Australian contexts","volume":"15","author":"Clarke","year":"2008","journal-title":"Murdoch eLaw Journal"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"123","DOI":"10.1016\/j.clsr.2009.02.002","article-title":"Privacy impact assessment: Its origin and development","volume":"25","author":"Clarke","year":"2009","journal-title":"Computer Law & Security Report"},{"key":"2023021421135391400_","article-title":"FTC enforcement against false safe harbor claims","author":"Connolly","year":"2010"},{"key":"2023021421135391400_","unstructured":"Council of Europe. 1950. Convention for the Protection of Human Rights and Fundamental Freedoms. Rome, Italy: Council of Europe.Available at: http:\/\/conventions.coe.int\/treaty\/en\/Treaties\/Html\/005.htm"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"28","DOI":"10.1145\/293411.293440","article-title":"Internet privacy","volume":"42","author":"Cranor","year":"1999","journal-title":"Communications of the ACM"},{"key":"2023021421135391400_","article-title":"Intel finds stolen laptops can be costly","author":"Crothers","year":"2009"},{"issue":"3","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"341","DOI":"10.2307\/249775","article-title":"How did they get my name? An exploratory investigation of consumer attitudes toward secondary information use","volume":"17","author":"Culnan","year":"1993","journal-title":"Management Information Systems Quarterly"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"20","DOI":"10.1509\/jppm.19.1.20.16944","article-title":"Protecting privacy online: Is self-regulation working?","volume":"19","author":"Culnan","year":"2000","journal-title":"Journal of Public Policy & Marketing"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"104","DOI":"10.1287\/orsc.10.1.104","article-title":"Information privacy concerns, procedural fairness, and impersonal trust: An empirical investigation","volume":"10","author":"Culnan","year":"1999","journal-title":"Organization Science"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"323","DOI":"10.1111\/1540-4560.00067","article-title":"Consumer privacy: Balancing economic and justice considerations","volume":"59","author":"Culnan","year":"2003","journal-title":"The Journal of Social Issues"},{"key":"2023021421135391400_","article-title":"The Culnan-Milne survey of consumers and online privacy notices","author":"Culnan","year":"2001"},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"673","DOI":"10.2307\/20650322","article-title":"How ethics can enhance organizational privacy: Lessons from the ChoicePoint and TJX data breaches","volume":"33","author":"Culnan","year":"2009","journal-title":"Management Information Systems Quarterly"},{"issue":"6","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"35","DOI":"10.1002\/jcaf.20054","article-title":"How does SOX change IT?","volume":"15","author":"Damianides","year":"2004","journal-title":"Journal of Corporate Accounting & Finance"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"295","DOI":"10.1007\/s12394-010-0059-6","article-title":"Extending the value chain to incorporate privacy by design principles","volume":"3","author":"David","year":"2010","journal-title":"Identity in the Information Society"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1287\/isre.1060.0080","article-title":"An extended privacy calculus model for e-commerce transactions","volume":"17","author":"Dinev","year":"2006","journal-title":"Information Systems Research"},{"issue":"4","key":"2023021421135391400_","article-title":"The privacy paradox: The case of secondary disclosure","volume":"7","author":"D'Souza","year":"2009","journal-title":"Review of Marketing Science"},{"key":"2023021421135391400_","unstructured":"Federal Trade Commission. 2000. Self-Regulation and Privacy Online: A Report to Congress. Washington, D.C.: Federal Trade Commission.Available at: http:\/\/www.ftc.gov\/privacy"},{"issue":"6","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"749","DOI":"10.1287\/mnsc.48.6.749.193","article-title":"Privacy protection of binary confidential data against deterministic, stochastic, and insider threat","volume":"48","author":"Garfinkel","year":"2002","journal-title":"Management Science"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"23","DOI":"10.1287\/isre.1070.0112","article-title":"Releasing individually identifiable microdata with privacy protection against stochastic threat: An application to health information","volume":"18","author":"Garfinkel","year":"2007","journal-title":"Information Systems Research"},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"297","DOI":"10.1016\/S0167-9236(98)00057-8","article-title":"Anonymous mechanisms in group decision support systems communication","volume":"23","author":"Gavish","year":"1998","journal-title":"Decision Support Systems"},{"issue":"3","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"563","DOI":"10.1506\/H1C0-EU27-UU2K-8EC8","article-title":"Professionalization in action: Accountants' attempt at building a network of support for the WebTrust seal of assurance","volume":"21","author":"Gendron","year":"2004","journal-title":"Contemporary Accounting Research"},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"438","DOI":"10.1145\/581271.581274","article-title":"The economics of information security investment","volume":"5","author":"Gordon","year":"2002","journal-title":"ACM Transactions on Information and System Security"},{"issue":"6","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"171","DOI":"10.17705\/1jais.00068","article-title":"Theoretical explanations for firms' information privacy","volume":"6","author":"Greenaway","year":"2005","journal-title":"Journal of the Association for Information Systems"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"87","DOI":"10.2308\/jis.2003.17.2.87","article-title":"Extending the accounting brand to privacy services","volume":"17","author":"Greenstein","year":"2003","journal-title":"Journal of Information Systems"},{"key":"2023021421135391400_","unstructured":"Grossklags, J., and A. Acquisti. 2007. When 25 Cents Is Too Much: An Experiment on Willingness-to-Sell and Willingness-to-Protect Personal Information. Proceedings of the 6th Workshop on Economics and Information Security, Carnegie-Mellon University, Pittsburgh, PA."},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"691","DOI":"10.1086\/261404","article-title":"The costs and benefits of ownership: A theory of vertical and lateral integration","volume":"94","author":"Grossman","year":"1986","journal-title":"The Journal of Political Economy"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"13","DOI":"10.2753\/MIS0742-1222240202","article-title":"Overcoming online information privacy concerns: An information-processing theory approach","volume":"24","author":"Hann","year":"2007","journal-title":"Journal of Management Information Systems"},{"issue":"6","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"1094","DOI":"10.1287\/mnsc.1070.0837","article-title":"Consumer privacy and marketing avoidance: A static model","volume":"54","author":"Hann","year":"2008","journal-title":"Management Science"},{"issue":"6","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"1119","DOI":"10.1086\/261729","article-title":"Property rights and the nature of the firm","volume":"98","author":"Hart","year":"1990","journal-title":"The Journal of Political Economy"},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1145\/299157.299175","article-title":"Building consumer trust online","volume":"42","author":"Hoffman","year":"1999","journal-title":"Communications of the ACM"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"19","DOI":"10.2307\/25148779","article-title":"The value of privacy assurance: An exploratory field experiment","volume":"31","author":"Hui","year":"2007","journal-title":"Management Information Systems Quarterly"},{"key":"2023021421135391400_","unstructured":"IBM Research. 2009. Inventor's Corner: Innovations Enable Privacy by Design. Yorktown Heights, NY: IBM.Available at: http:\/\/ibmresearchnews.blogspot.com\/2009\/10\/inventors-corner-innovations-enable.html"},{"key":"2023021421135391400_","article-title":"Commissioner Cavoukian expects health sector to encrypt all health information on mobile devices: Nothing short of this is acceptable","volume":"24","author":"Information Privacy Commissioner of Ontario","year":"2009","journal-title":"December"},{"key":"2023021421135391400_","unstructured":"IT Governance Institute. 2006. IT Control Objectives for Sarbanes-Oxley: The Role of IT in the Design and Implementation of Internal Control over Financial Reporting. 2nd edition. Rolling Meadows, IL: Information Systems Audit and Control Association."},{"key":"2023021421135391400_","unstructured":"IT Governance Institute. 2007. COBIT 4.1. Rolling Meadows, IL: Information Systems Audit and Control Association.Available at: http:\/\/www.isaca.org\/Knowledge-Center\/cobit\/Documents\/CobiT_4.1.pdf"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"73","DOI":"10.1111\/j.1475-679x.2004.00163.x","article-title":"Enforced standards versus evolution by general acceptance: A comparative study of e-commerce privacy disclosure and practice in the United States and the United Kingdom","volume":"43","author":"Jamal","year":"2005","journal-title":"Journal of Accounting Research"},{"key":"2023021421135391400_","unstructured":"Jorion, P. 2000. Value at Risk: The Benchmark for Controlling Market Risk. Blacklick, OH: McGraw-Hill Professional Book Group."},{"issue":"11","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"1721","DOI":"10.1287\/mnsc.1060.0570","article-title":"Design of robust business-to-business electronic marketplaces with guaranteed privacy","volume":"52","author":"Kalvenes","year":"2006","journal-title":"Management Science"},{"key":"2023021421135391400_","article-title":"Cross-border privacy impact assessments: An introduction","volume":"3","author":"Karol","year":"2001","journal-title":"Information Systems Control Journal"},{"issue":"1","key":"2023021421135391400_","first-page":"49","article-title":"Model for the transition from ethical deficit to a transparent corporate culture: A response to the financial meltdown","volume":"2","author":"Kermis","year":"2009","journal-title":"Journal of Academic and Business Ethics"},{"issue":"3","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"286","DOI":"10.1287\/isre.1060.0093","article-title":"The effects of trust-assuring arguments on consumer trust in Internet stores: Application of Toulmin's model of argumentation","volume":"17","author":"Kim","year":"2006","journal-title":"Information Systems Research"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"544","DOI":"10.1016\/j.dss.2007.07.001","article-title":"A trust-based consumer decision-making model in electronic commerce: The role of trust, perceived risk, and their antecedents","volume":"44","author":"Kim","year":"2008","journal-title":"Decision Support Systems"},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"1000","DOI":"10.1016\/j.dss.2007.11.007","article-title":"Revisiting the role of Web assurance seals in business-to-consumer electronic commerce","volume":"44","author":"Kim","year":"2008","journal-title":"Decision Support Systems"},{"key":"2023021421135391400_","article-title":"Google calls for global online privacy standard","author":"Kirk","year":"2007","journal-title":"IDG News Service"},{"issue":"12","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"727","DOI":"10.17705\/1jais.00180","article-title":"A two-process view of trust and distrust building in recommendation agents: A process-tracing study","volume":"9","author":"Komiak","year":"2008","journal-title":"Journal of the Association for Information Systems"},{"key":"2023021421135391400_","first-page":"273","article-title":"Privacy by design: Principles of privacy-aware ubiquitous systems","volume":"2201","author":"Langheinrich","year":"2001","journal-title":"Proceedings of the Third International Conference on Ubiquitous Computing, Atlanta, GA"},{"key":"2023021421135391400_","first-page":"237","article-title":"A privacy awareness system for ubiquitous computing environments","volume":"2498","author":"Langheinrich","year":"2002","journal-title":"Proceedings of the Fourth International Conference on Ubiquitous Computing"},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"1431","DOI":"10.1016\/j.dss.2006.04.008","article-title":"Perceived risks, counter-beliefs, and intentions to use anti-counterterrorism Web sites: An exploratory study of government-citizens online interactions in a turbulent environment","volume":"43","author":"Lee","year":"2007","journal-title":"Decision Support Systems"},{"key":"2023021421135391400_","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2011.02.009","article-title":"Profit-maximizing investments in customer information security","author":"Lee","year":"2011","journal-title":"Decision Support Systems"},{"key":"2023021421135391400_","article-title":"GAPP: Generally Accepted Privacy Principles","volume":"19","author":"Lesser","year":"2010","journal-title":"January"},{"issue":"2","key":"2023021421135391400_","first-page":"357","article-title":"Privacy law in the United States, the E.U. and Canada: The allure of the middle ground","volume":"2","author":"Levin","year":"2005","journal-title":"University of Ottawa Law and Technology Journal"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"127","DOI":"10.1016\/j.im.2004.01.002","article-title":"Beyond concern: A privacy-trust-behavioral intention model of electronic commerce","volume":"42","author":"Liu","year":"2004","journal-title":"Information & Management"},{"issue":"12","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"43","DOI":"10.1109\/2.889092","article-title":"Are we forgetting the risks of information technology?","volume":"33","author":"Longstaff","year":"2000","journal-title":"IEEE Computer"},{"key":"2023021421135391400_","unstructured":"Loshin, D. 2002. Knowledge integrity: Data ownership. As quoted in Data Ownership, U.S. Department of Health and Human Services. Rockville, MD: Office of Research Integrity."},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"336","DOI":"10.1287\/isre.1040.0032","article-title":"Internet users' information privacy concerns: The construct, the scale, and a causal model","volume":"15","author":"Malhotra","year":"2004","journal-title":"Information Systems Research"},{"issue":"3","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1111\/j.1540-4560.1977.tb01879.x","article-title":"Conceptions of privacy: Current status and next steps","volume":"33","author":"Margulis","year":"1977","journal-title":"The Journal of Social Issues"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/TPC.2006.870462","article-title":"Safe harbor and privacy protection: A looming issue for IT professionals","volume":"49","author":"Markel","year":"2006","journal-title":"IEEE Transactions on Professional Communication"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"46","DOI":"10.2307\/248873","article-title":"Four ethical issues of the information age","volume":"10","author":"Mason","year":"1986","journal-title":"Management Information Systems Quarterly"},{"key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"106","DOI":"10.2307\/41164997","article-title":"Marketing information systems: Uses in the Fortune 500","volume":"25","author":"McLeod","year":"1982","journal-title":"California Management Review"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"101","DOI":"10.1287\/mnsc.1060.0603","article-title":"Minimizing information loss and preserving privacy","volume":"53","author":"Menon","year":"2007","journal-title":"Management Science"},{"issue":"3","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"256","DOI":"10.1287\/isre.1050.0056","article-title":"Maximizing accuracy of shared databases when concealing sensitive patterns","volume":"16","author":"Menon","year":"2005","journal-title":"Information Systems Research"},{"issue":"5","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"345","DOI":"10.1080\/01972240290108168","article-title":"Using the content of online privacy notices to inform public policy: A longitudinal analysis of the 1998\u20132001 U.S. Web surveys","volume":"18","author":"Milne","year":"2002","journal-title":"The Information Society"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"217","DOI":"10.1111\/j.1745-6606.2004.tb00865.x","article-title":"Consumers' protection of online privacy and identity","volume":"38","author":"Milne","year":"2004","journal-title":"The Journal of Consumer Affairs"},{"key":"2023021421135391400_","article-title":"What Does Privacy Have to Do with It? Privacy Risk Assessment","author":"Mitrano","year":"2005","journal-title":"Presentation at the 2005 Security Professionals Conference, Washington, D.C., April 3\u20135"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"54","DOI":"10.1509\/jppm.19.1.54.16942","article-title":"Internet privacy and security: An examination of online retailer disclosures","volume":"19","author":"Miyazaki","year":"2000","journal-title":"Journal of Public Policy & Marketing"},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"653","DOI":"10.2307\/2667051","article-title":"The social construction of organizational knowledge: A study of the uses of coercive, mimetic, and normative isomorphism","volume":"44","author":"Mizruchi","year":"1999","journal-title":"Administrative Science Quarterly"},{"issue":"9","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"1549","DOI":"10.1287\/mnsc.41.9.1549","article-title":"Accessibility, security, and accuracy in statistical databases: The case for the multiplicative fixed data perturbation approach","volume":"41","author":"Muralidhar","year":"1995","journal-title":"Management Science"},{"issue":"10","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"1399","DOI":"10.1287\/mnsc.45.10.1399","article-title":"A general additive data perturbation method for database security","volume":"45","author":"Muralidhar","year":"1999","journal-title":"Management Science"},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"683","DOI":"10.1111\/j.1540-5915.2001.tb00977.x","article-title":"An improved security requirement for data perturbation with implications for e-commerce","volume":"32","author":"Muralidhar","year":"2001","journal-title":"Decision Sciences"},{"key":"2023021421135391400_","unstructured":"Office of the United Nations High Commissioner for Human Rights. 1966. International Covenant on Civil and Political Rights. New York, NY: United Nations.Available at: http:\/\/www2.ohchr.org\/english\/law\/ccpr.htm"},{"key":"2023021421135391400_","first-page":"167","article-title":"Cultural lag as theory","volume":"41","author":"Ogburn","year":"1957","journal-title":"Sociology and Social Research"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"243","DOI":"10.1016\/S0167-4870(02)00172-1","article-title":"Privacy versus willingness to disclose in e-commerce exchanges: The effect of risk awareness on the relative role of trust and control","volume":"25","author":"Olivero","year":"2004","journal-title":"Journal of Economic Psychology"},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"423","DOI":"10.2307\/249729","article-title":"Ethical standards for information systems professionals: A case for a unified code","volume":"16","author":"Oz","year":"1992","journal-title":"Management Information Systems Quarterly"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"105","DOI":"10.2307\/25148783","article-title":"Understanding and mitigating uncertainty in online exchange relationships: A principal-agent perspective","volume":"31","author":"Pavlou","year":"2007","journal-title":"Management Information Systems Quarterly"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"97","DOI":"10.2753\/MIS0742-1222260205","article-title":"Information security: Facilitating user precautions vis-\u00e0-vis enforcement against attackers","volume":"26","author":"Png","year":"2009","journal-title":"Journal of Management Information Systems"},{"key":"2023021421135391400_","unstructured":"Price, E. 2006. Liberty for All: Reclaiming Individual Privacy in a New Era of Public Morality. New Haven, CT: Yale University Press."},{"key":"2023021421135391400_","unstructured":"PricewaterhouseCoopers. 2008. Safeguarding the New Currency of Business: Findings from the 2008 Global State of Information Security Study. New York, NY: Security Advisory Services."},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"153","DOI":"10.1057\/jdg.2008.7","article-title":"Protecting personal information using Generally Accepted Accounting Principles and continuous control monitoring","volume":"5","author":"Prosch","year":"2008","journal-title":"International Journal of Disclosure and Governance"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"48","DOI":"10.1145\/293411.293455","article-title":"The platform for privacy preferences","volume":"42","author":"Reagle","year":"1999","journal-title":"Communications of the ACM"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"19","DOI":"10.17705\/1jais.00077","article-title":"Private transactions in public places: An exploration of the impact of the computer environment on public transactional Web site use","volume":"7","author":"Rensel","year":"2006","journal-title":"Journal of the Association for Information Systems"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"339","DOI":"10.1111\/j.1745-6606.2005.00018.x","article-title":"Your privacy is sealed: Effects of Web privacy seals on trust and personal disclosures","volume":"39","author":"Rifon","year":"2005","journal-title":"The Journal of Consumer Affairs"},{"key":"2023021421135391400_","article-title":"Online Privacy Research Lab Reveals Details about Its Work","author":"Rodriguez","year":"2009","journal-title":"An Announcement about the Privacy By Design Lab at the Center for Advancing Business through Information Technology"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"204","DOI":"10.1016\/j.dss.2004.10.013","article-title":"Secure and useful data sharing","volume":"42","author":"Sarathy","year":"2006","journal-title":"Decision Support Systems"},{"key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"111","DOI":"10.1023\/A:1025001627419","article-title":"Strategic and ethical considerations in managing digital privacy","volume":"46","author":"Sarathy","year":"2003","journal-title":"Journal of Business Ethics"},{"key":"2023021421135391400_","doi-asserted-by":"crossref","unstructured":"Schechter, S. E., and M. D. Smith. 2003. How Much Security Is Enough to Stop a Thief? The Economics of Outsider Theft Via Computer Systems Networks. Proceedings of the 7th Financial Cryptography Conference, Guadeloupe, French West Indies.","DOI":"10.1007\/978-3-540-45126-6_9"},{"issue":"7","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"805","DOI":"10.1016\/j.im.2006.07.003","article-title":"Compliance to the fair information practices: How are the Fortune 500 handling online privacy disclosures?","volume":"43","author":"Schwaig","year":"2006","journal-title":"Information & Management"},{"key":"2023021421135391400_","article-title":"Issues of data ownership","author":"Scofield","year":"1998","journal-title":"Information Management Magazine"},{"key":"2023021421135391400_","unstructured":"Senden, L. 2004. Soft Law in European Community Law. Portland, OR: Hart Publishing."},{"issue":"1","key":"2023021421135391400_","article-title":"Soft law, self-regulation and co-regulation in European law: Where do they meet","volume":"9","author":"Senden","year":"2005","journal-title":"Electronic Journal of Comparative Law"},{"issue":"4\u20135","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"295","DOI":"10.1016\/S0278-4254(01)00037-0","article-title":"Information technology and the social construction of information privacy","volume":"20","author":"Shapiro","year":"2001","journal-title":"Journal of Accounting and Public Policy"},{"issue":"6","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"344","DOI":"10.17705\/1jais.00161","article-title":"An experimental study on ubiquitous commerce adoption: Impact of personalization and privacy concerns","volume":"9","author":"Sheng","year":"2008","journal-title":"Journal of the Association for Information Systems"},{"issue":"12","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"104","DOI":"10.1145\/163298.163349","article-title":"Privacy policies and practices: Inside the organizational maze","volume":"36","author":"Smith","year":"1993","journal-title":"Communications of the ACM"},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"167","DOI":"10.2307\/249477","article-title":"Information privacy: Measuring individuals' concerns about organizational practices","volume":"20","author":"Smith","year":"1996","journal-title":"Management Information Systems Quarterly"},{"key":"2023021421135391400_","unstructured":"Solove, D. J. 2004. The Digital Person: Technology and Privacy in the Information Age. New York, NY: New York University Press."},{"key":"2023021421135391400_","article-title":"Do social networks bring the end of privacy","author":"Solove","year":"2008","journal-title":"Scientific American"},{"issue":"3","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"503","DOI":"10.2307\/25148854","article-title":"Internet users' information privacy-protective responses: A taxonomy and a nomological model","volume":"32","author":"Son","year":"2008","journal-title":"Management Information Systems Quarterly"},{"key":"2023021421135391400_","unstructured":"Soo Hoo, K. 2000. How much is enough? A risk management approach to computer security. Working paper, Stanford University."},{"issue":"8","key":"2023021421135391400_","first-page":"147","article-title":"Privacy impact assessment: Toward a better informed process for evaluating privacy issues arising from new technologies","volume":"5","author":"Stewart","year":"1999","journal-title":"Privacy Law and Policy Reporter"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"36","DOI":"10.1287\/isre.13.1.36.97","article-title":"An empirical examination of the concern for information privacy instrument","volume":"13","author":"Stewart","year":"2002","journal-title":"Information Systems Research"},{"key":"2023021421135391400_","unstructured":"Stone, D. L., and E. F. Stone-Romero. 1998. A multiple stakeholder model of privacy in organizations. In Managerial Ethics: Morally Managing People and Processes, edited by Schminke, M., 35\u201359. Hillsdale, NJ: Lawrence Erlbaum Associates."},{"issue":"2","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"143","DOI":"10.2307\/248772","article-title":"Key information liability issues facing managers: Software piracy, proprietary databases, and individual rights to privacy","volume":"14","author":"Straub","year":"1990","journal-title":"Management Information Systems Quarterly"},{"key":"2023021421135391400_","doi-asserted-by":"crossref","unstructured":"Tambini, D., D. Leonardi, and C. Marsden. 2008. Codifying Cyberspace: Communications Self-Regulation in the Age of Internet Convergence. New York, NY: Routledge.","DOI":"10.4324\/9780203947067"},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"153","DOI":"10.2753\/MIS0742-1222240406","article-title":"Gaining trust through online privacy protection: Self-regulation, mandatory standards, or caveat emptor","volume":"24","author":"Tang","year":"2008","journal-title":"Journal of Management Information Systems"},{"issue":"1","key":"2023021421135391400_","first-page":"13","article-title":"Israel's data protection reform: Reduce bureaucracy, increase accountability","volume":"10","author":"Tene","year":"2009","journal-title":"Privacy and Data Protection"},{"key":"2023021421135391400_","article-title":"The Effect of Online Privacy Information on Purchasing Behavior: An Experimental Study","author":"Tsai","year":"2007","journal-title":"Proceedings of the 6th Workshop on Economics and Information Security, Pittsburgh, PA, June 6\u20137"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"8","DOI":"10.1201\/1078\/43203.20.1.20031201\/40079.2","article-title":"Privacy on the Web: An examination of user concerns, technology, and implications for business organizations and individuals","volume":"20","author":"Turner","year":"2003","journal-title":"Information Systems Management"},{"key":"2023021421135391400_","unstructured":"U.K. Information Commissioner's Office. 2008a. The Privacy Dividend: The Business Case for Investing in Proactive Privacy Protection. Cheshire, U.K.: U.K. Information Commissioner's Office.Available at: http:\/\/www.ico.gov.uk\/upload\/documents\/library\/data_protection\/detailed_specialist_guides\/privacy_dividend.pdf"},{"key":"2023021421135391400_","unstructured":"U.K. Information Commissioner's Office. 2008b. Privacy by Design. Cheshire, U.K.: U.K. Information Commissioner's Office.Available at: http:\/\/www.ico.gov.uk\/upload\/documents\/pdb_report_html\/privacy_by_design_report_v2.pdf"},{"key":"2023021421135391400_","unstructured":"U.K. Information Commissioner's Office. 2010. Lettings and Real Estate Agents Risking Legal Action, Warns ICO. Cheshire, U.K.: U.K. Information Commissioner's Office.Available at: http:\/\/www.ico.gov.uk\/upload\/documents\/pressreleases\/2010\/estate_agents_notify_08092010.pdf"},{"key":"2023021421135391400_","unstructured":"United Nations. 1948. The Universal Declaration of Human Rights. New York, NY: United Nations.Available at: http:\/\/www.un.org\/en\/documents\/udhr\/index.shtml"},{"key":"2023021421135391400_","unstructured":"U.S. Census Bureau. 2010. Census Bureau Privacy Impact Assessments. Washington, D.C.: U.S. Census Bureau.Available at: http:\/\/www.census.gov\/po\/pia\/"},{"key":"2023021421135391400_","unstructured":"U.S. Department of Commerce. July 21, 2000. Safe Harbor Privacy Principles. Washington, D.C.: Electronic Commerce Task Force, International Trade Administrations.Available at: http:\/\/www.ita.doc.gov\/td\/ecom\/SHPRINCIPLESFINAL.htm"},{"key":"2023021421135391400_","unstructured":"U.S. Department of Health and Human Services. 2010. Data Ownership. Rockville, MD: Office of Research Integrity."},{"key":"2023021421135391400_","unstructured":"U.S. Department of the Interior. 2010. Understanding the Privacy Impact Assessment. Presentation, Washington, D.C. Available at: http:\/\/www.doi.gob\/ocip\/privacy\/basic_pia_overview.ppt"},{"issue":"4","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"267","DOI":"10.1016\/0167-9236(94)00042-4","article-title":"Why not one big database? Principles for data ownership","volume":"15","author":"Van Alstyne","year":"1995","journal-title":"Decision Support Systems"},{"issue":"6","key":"2023021421135391400_","doi-asserted-by":"crossref","first-page":"415","DOI":"10.17705\/1jais.00092","article-title":"Concern for information privacy and online consumer purchasing","volume":"7","author":"Van Slyke","year":"2006","journal-title":"Journal of the Association for Information Systems"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"1","DOI":"10.2308\/jeta.2004.1.1.1","article-title":"Principles of analytic monitoring for continuous assurance","volume":"1","author":"Vasarhelyi","year":"2004","journal-title":"Journal of Emerging Technologies in Accounting"},{"issue":"1","key":"2023021421135391400_","first-page":"110","article-title":"The continuous audit of online systems","volume":"10","author":"Vasarhelyi","year":"1991","journal-title":"Auditing: A Journal of Practice & Theory"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"106","DOI":"10.1287\/isre.1070.0143","article-title":"A value-at-risk approach to information security investment","volume":"19","author":"Wang","year":"2008","journal-title":"Information Systems Research"},{"issue":"5","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"193","DOI":"10.2307\/1321160","article-title":"The right to privacy","volume":"4","author":"Warren","year":"1890","journal-title":"Harvard Law Review"},{"issue":"3","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"233","DOI":"10.1016\/j.clsr.2008.03.003","article-title":"Privacy impact assessments: International experience as a basis for U.K. guidance","volume":"24","author":"Warren","year":"2008","journal-title":"Computer Law & Security Report"},{"issue":"1","key":"2023021421135391400_","doi-asserted-by":"publisher","first-page":"205","DOI":"10.2308\/jis.2006.20.1.205","article-title":"Research opportunities in information technology and internal auditing","volume":"20","author":"Weidenmier","year":"2006","journal-title":"Journal of Information Systems"},{"key":"2023021421135391400_","unstructured":"Westin, A. 1967. Privacy and Freedom. New York, NY: Athenum."},{"key":"2023021421135391400_","article-title":"Electronic commerce law: Direct regulation, co-regulation and self-regulation","author":"Winn","year":"2011","journal-title":"Cahiers du CRID"},{"key":"2023021421135391400_","article-title":"Examining the Formation of Individuals' Information Privacy Concerns: Toward an Integrative View","author":"Xu","year":"2008","journal-title":"Proceedings of the 29th Annual International Conference on Information Systems, Paris, France"}],"container-title":["Journal of Information Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/publications.aaahq.org\/jis\/article-pdf\/25\/2\/47\/11399\/isys-10091.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/publications.aaahq.org\/jis\/article-pdf\/25\/2\/47\/11399\/isys-10091.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,11]],"date-time":"2023-06-11T10:49:09Z","timestamp":1686480549000},"score":1,"resource":{"primary":{"URL":"https:\/\/publications.aaahq.org\/jis\/article\/25\/2\/47\/1541\/A-Survey-of-Consumer-Information-Privacy-from-the"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,11,1]]},"references-count":156,"journal-issue":{"issue":"2","published-online":{"date-parts":[[2011,11,1]]},"published-print":{"date-parts":[[2011,11,1]]}},"URL":"https:\/\/doi.org\/10.2308\/isys-10091","relation":{},"ISSN":["0888-7985","1558-7959"],"issn-type":[{"value":"0888-7985","type":"print"},{"value":"1558-7959","type":"electronic"}],"subject":[],"published":{"date-parts":[[2011,11,1]]}}}