Informing the design of better privacy policies

The authors review literature that can inform the design of better privacy policies. The review is focused around three privacy principles central to consumer-firm interactions. These privacy principles include: sensitive information and willingness to disclose; covert collection and use of data; and notice and choice. The authors argue that the best privacy policies are those which adequately address these principles thereby lowering the public's privacy concern. The ability of the EU and US's regulatory environments to address these principles is discussed. In accordance with the review the authors note the EU's GDPR has provisions to address the three privacy principles while the U.S. regulatory environment is not effective in addressing these principles.