The effects of voluntary GDPR adoption and the readability of privacy statements on customers’ information disclosure intention and trust

Yibo Zhang,Tawei Wang,Carol Hsu

DOI: https://doi.org/10.1108/jic-05-2019-0113

2019-11-20

Journal of Intellectual Capital

Abstract:Purpose The purpose of this paper is to examine the impacts of companies’ voluntary adoption of the General Data Protection Regulation (GDPR) as well as the readability of privacy statements on US customers’ intention to disclose information and their trust in a company. Design/methodology/approach Building on the construal level theory and psychological distance, the authors conduct a 2 × 2 + 2 between-participants experiment with 255 participants. Findings The findings show that a company’s voluntary adoption of the GDPR has positive effects on customers’ intention to disclose information to and their trust in that company. In addition, the effects of GDPR adoption are stronger when the adopting company’s privacy statements possess a higher level of readability. Originality/value The authors believe this study poses policy implications for the outcomes of GDPR adoption and the recent debate on both a stricter data breach and privacy regulation.

management,business

What problem does this paper attempt to address?

The problem that this paper attempts to solve is: the impact of the voluntary adoption of the General Data Protection Regulation (GDPR) by American companies and the readability of privacy statements on customer trust and the willingness to disclose information.

### Research Background
With the development of digital technology and big data, enterprises can enhance their decision - making capabilities and improve organizational performance by collecting and analyzing large amounts of data. However, this also raises significant concerns about personal privacy. In particular, high - profile data leakage events such as the Facebook privacy scandal in 2018 have made regulators and the public more concerned about personal data protection issues. To address these issues, the European Union implemented the General Data Protection Regulation (GDPR) in May 2018, requiring enterprises to follow more stringent regulations when collecting and processing personal data.

### Research Purposes
This paper aims to explore two aspects:
1. **Voluntary Adoption of GDPR**: Due to the extraterritorial applicability requirements of GDPR, many American companies consider voluntarily adopting GDPR as a forward - looking strategic decision.
2. **Readability of Privacy Statements**: GDPR requires enterprises to use concise, transparent, and easy - to - understand language when communicating privacy policies, encouraging American companies to design more readable privacy statements.

### Research Questions
Specifically, the research aims to answer the following questions:
- **RQ1**: How do the voluntary adoption of GDPR by American companies and the readability of their privacy statements affect customer trust and the willingness to disclose information?

### Research Methods
To answer the above questions, based on the Construal Level Theory (CLT) and the concept of psychological distance, the research constructed a theoretical model and conducted an empirical test through a 2×2 + 2 between - subjects experiment. The experiment involved 255 participants who played the role of potential customers of a hypothetical American retail company. The research manipulated two experimental factors: whether the company adopted GDPR and the readability of the privacy statement.

### Main Findings
- Voluntary adoption of GDPR has a positive impact on the trust and information disclosure willingness of the company's customers.
- The readability of privacy statements enhances customer trust and the willingness to disclose information, especially when the company adopts GDPR, this impact is more significant.
- The concreteness of privacy statement language plays an intermediary role between readability and customer trust and the willingness to disclose information.

### Conclusions and Significance
This research reveals the important impact of the voluntary adoption of GDPR and the readability of privacy statements on the relationship between enterprises and customers, providing policy implications for enterprises, especially in the context of strengthening data protection regulations on a global scale at present.