Although marketers increasingly rely on customer data, firms have little insight into the ramifications of such data use and do not know how to prevent negative effects. Data management efforts may heighten customers’ vulnerability worries or create real vulnerability. Using a conceptual framework grounded in gossip theory, the authors link customer vulnerability to negative performance effects. Three studies show that transparency and control in firms’ data management practices can suppress the negative effects of customer data vulnerability. Experimental manipulations reveal that mere access to personal data inflates feelings of violation and reduces trust. An event study of data security breaches affecting 414 public companies also confirms negative effects, as well as spillover vulnerabilities from rival firms’ breaches, on firm performance. Severity of the breach hurts the focal firm but helps the rival firm, which provides some insight into mixed findings in prior research. Finally, a field study with actual customers of 15 companies across three industries demonstrates consistent effects across four types of customer data vulnerability and confirms that violation and trust mediate the effects of data vulnerabilities on outcomes.
AcquistiAlessandro, FriedmanAllan, and TelangRahul (2006), “Is There a Cost to Privacy Breaches? An Event Study,” in Proceedings of the 27th International Conference on Information Systems. Milwaukee: Association for Information Systems, 94–116.
2.
AcquistiAlessandro, JohnLeslie K., and LoewensteinGeorge (2012), “The Impact of Relative Standards on the Propensity to Disclose,”Journal of Marketing Research, 49 (April), 160–74.
AwadNaveen Farag, and KrishnanM.S. (2006), “The Personalization Privacy Paradox: An Empirical Evaluation of Information Transparency and the Willingness to be Profiled Online for Personalization,”Management Information Systems Quarterly, 30 (1), 13–28.
5.
BakerStacey Menzel, GentryJames W., and RittenburgTerri L. (2005), “Building Understanding of the Domain of Consumer Vulnerability,”Journal of Macromarketing, 25 (2), 128–39.
6.
BartYakov, ShankarVenkatesh, SultanFareena, and UrbanGlen L. (2005), “Are the Drivers and Role of Online Trust the Same for All Web Sites and Consumers? A Large-Scale Exploratory Empirical Study,”Journal of Marketing, 69 (October), 133–52.
7.
BaumeisterRoy F., and LearyMark R. (1995), “The Need to Belong: Desire for Interpersonal Attachments as a Fundamental Human Motivation,”Psychological Bulletin, 117 (3), 497–529.
8.
BaumeisterRoy F., ZhangLiqing, and VohsKathleen D. (2004), “Gossip as Cultural Learning,”Review of General Psychology, 8 (2), 111–21.
9.
BeersmaBianca, and Van KleefGerben A. (2012), “Why People Gossip: An Empirical Analysis of Social Motives, Antecedents, and Consequences,”Journal of Applied Social Psychology, 42 (11), 2640–70.
BorahAbhishek, and TellisGerard (2014), “Make, Buy, or Ally? Choice of and Payoff from Announcements of Alternate Strategies for Innovations,”Marketing Science, 33 (1), 114–33.
12.
BorahAbhishek, and TellisGerard (2016), “Halo (Spillover) Effects in Social Media: Do Product Recalls of One Brand Hurt or Help Rival Brands?”Journal of Marketing Research, 53 (April), 143–60.
13.
CampbellCynthia J., CowanArnold R., and SalottiValentina (2010), “Multi-Country Event-Study Methods,”Journal of Banking & Finance, 34 (12), 3078–90.
14.
CaudillEve M., and MurphyPatrick E. (2000), “Consumer Online Privacy: Legal and Ethical Issues,”Journal of Public Policy & Marketing, 19 (Spring), 7–19.
15.
ChellappaRamnath K., and SinRaymond G. (2005), “Personalization Versus Privacy: An Empirical Examination of the Online Consumer's Dilemma,”Information Technology and Management, 6 (2), 181–202.
16.
CleerenKathleen, van HeerdeHarald J., and DekimpeMarnik G. (2013), “Rising from the Ashes: How Brands and Categories Can Overcome Product-Harm Crises,”Journal of Marketing, 77 (March), 58–77.
CranageDavid A. (2004), “Conservative Choice, Service Failure, and Customer Loyalty: Testing the Limits of Informed Choice,”Journal of Hospitality & Tourism Research, 28 (3), 327–45.
19.
CumbleyRichard, and ChurchPeter (2013), “Is ‘Big Data’ Creepy?”Computer Law & Security Review, 29 (5), 601–09.
20.
De AngelisMatteo, BonezziAndrea, PelusoAlessandro M., RuckerDerek D., and CostabileMichele (2012), “On Braggarts and Gossips: A Self-Enhancement Account of Word-of-Mouth Generation and Transmission,”Journal of Marketing Research, 49 (August), 551–63.
21.
DunbarRobin I.M. (2004), “Gossip in Evolutionary Perspective,”Review of General Psychology, 8 (2), 100–110.
22.
EderDonna, and EnkeJanet Lynne (1991), “The Structure of Gossip: Opportunities and Constraints on Collective Expression Among Adolescents,”American Sociological Review, 56 (4), 494–508.
23.
EmlerNicholas (1994), “Gossip, Reputation and Social Adaption,” in Good Gossip, GoodmanR.F. and Ben-Ze'evA., eds. Lawrence: University of Kansas Press, 119–40.
24.
FamaEugene F. (1998), “Market Efficiency, Long-Term Returns, and Behavioral Finance,”Journal of Financial Economics, 49 (3), 283–306.
25.
FeinbergMatthew, WillerRobb, StellarJennifer, and KeltnerDacher (2012), “The Virtues of Gossip: Reputational Information Sharing as Prosocial Behavior,”Journal of Personality and Social Psychology, 102 (5), 1015–30.
26.
FisherJohn A. (2013), “Secure My Data or Pay the Price: Consumer Remedy for the Negligent Enablement of Data Breach,”William & Mary Business Law Review, 215 (4), 217–33.
27.
FosterEric K. (2004), “Research on Gossip: Taxonomy, Methods, and Future Directions,”Review of General Psychology, 8 (2), 78–99.
GrégoireYany, and FisherRobert J. (2006), “The Effects of Relationship Quality on Customer Retaliation,”Marketing Letters, 17 (1), 31–46.
30.
GrégoireYany, and FisherRobert J. (2008), “Customer Betrayal and Retaliation: When Your Best Customers Become Your Worst Enemies,”Journal of the Academy of Marketing Science, 36 (2), 247–61.
31.
HausmanJ.A. (1978), “Specification Tests in Econometrics,”Econometrica, 46 (6), 1251–71.
32.
HomburgChristian, VollmayrJosef, and HahnAlexander (2014), “Firm Value Creation Through Major Channel Expansions: Evidence from an Event Study in the United States, Germany, and China,”Journal of Marketing, 78 (May), 38–61.
33.
HsiehTien-Shih, NoyesDaniel, LiuHong, and FiondellaLance (2015), “Quantifying Impact of Data Loss Incidents on Publicly-Traded Organizations,” in Proceedings of the IEEE. New York: IEEE, 2–15.
34.
HullandJohn (1999), “Use of Partial Least Squares (PLS) in Strategic Management Research: A Review of Four Recent Studies,”Strategic Management Journal, 20 (2), 195–204.
35.
IyengarSheena (2010), The Art of Choosing. New York: Twelve.
36.
JohnLeslie K., AcquistiAlessandro, and LoewensteinGeorge (2011), “Strangers on a Plane: Context-Dependent Willingness to Divulge Sensitive Information,”Journal of Consumer Research, 37 (5), 858–73.
37.
KoMyung, and DorantesCarlos (2006), “The Impact of Information Security Breaches on Financial Performance of the Breached Firms: An Empirical Investigation,”Journal of Information Technology Management, 17 (2), 13–22.
38.
KumarV., ZhangXi, and LuoAnita (2014), “Modeling Customer Opt-In and Opt-Out in a Permission-Based Marketing Context,”Journal of Marketing Research, 51 (August), 403–19.
39.
LearyMark R., and LederSadie (2009), “The Nature of Hurt Feelings: Emotional Experience and Cognitive Appraisals,” in Feeling Hurt in Close Relationships, VangelistiA.L., ed. New York: Cambridge University Press, 15–33.
40.
LwinMay, WirtzJochen, and WilliamsJerome D. (2007), “Consumer Online Privacy Concerns and Responses: A Power-Responsibility Equilibrium Perspective,”Journal of the Academy of Marketing Science, 35 (4), 573–85.
41.
MalhotraArvind, and MalhotraClaudia Kubowicz (2011), “Evaluating Customer Information Breaches as Service Failures: An Event Study Approach,”Journal of Service Research, 14 (1), 44–59.
42.
MalhotraNaresh K., KimSung S., and AgarwalJames (2004), “Internet Users’ Information Privacy Concerns (IUIPC): The Construct, the Scale, and a Causal Model,”Information Systems Research, 15 (4), 336–55.
MartinKelly D., and MurphyPatrick E. (2016), “The Role of Data Privacy in Marketing,”Journal of the Academy of Marketing Science, (published electronically September 22), DOI: 10.1007/s11747-016-0495-4.
45.
McAfeeAndrew, and BrynjolfssonErik (2012), “Big Data: The Management Revolution,”Harvard Business Review, (October), 3–9.
46.
McWilliamsAbagail and SiegelDonald (1997), “Event Studies in Management Research: Theoretical and Empirical Issues,”Academy of Management Journal, 40 (3), 626–57.
47.
MillsColleen (2010), “Experiencing Gossip: The Foundations for a Theory of Embedded Organizational Gossip,”Group & Organization Management, 35 (4), 371–90.
48.
MilneGeorge R., RohmAndrew J., and BahlShalini (2004), “Consumers’ Protection of Online Privacy and Identity,”Journal of Consumer Affairs, 38 (2), 217–32.
49.
ModiSachin B., and MishraSanjay (2011), “What Drives Financial Performance–Resource Efficiency or Resource Slack?: Evidence from U.S. Based Manufacturing Firms from 1991 to 2006,”Journal of Operations Management, 29 (3), 254–73.
50.
MoonYoungme (2000), “Intimate Exchanges: Using Computers to Elicit Self-Disclosure from Consumers,”Journal of Consumer Research, 26 (4), 323–39.
51.
MothersbaughDavid L., FoxxWilliam K.II, BeattySharon E., and WangSijun (2012), “Disclosure Antecedents in an Online Service Context: The Role of Sensitivity of Information,”Journal of Service Research, 15 (1), 76–98.
52.
PalmatierRobert W. (2008), “Interfirm Relational Drivers of Customer Value,”Journal of Marketing, 72 (July), 76–89.
53.
PalmatierRobert W., DantRajiv P., GrewalDhruv, and EvansKenneth R. (2006), “Factors Influencing the Effectiveness of Relationship Marketing: A Meta-Analysis,”Journal of Marketing, 70 (October), 136–53.
54.
PalmatierRobert W., ScheerLisa K., and SteenkampJan-Benedict E.M. (2007), “Customer Loyalty to Whom? Managing the Benefits and Risks of Salesperson-Owned Loyalty,”Journal of Marketing Research, 44 (May), 185–99.
55.
Ponemon Institute (2015), “2015 Cost of Data Breach Study: Global Analysis,” research report, IBM and Ponemon Institute.
56.
PreacherKristopher J., and HayesAndrew F. (2008), “Asymptotic and Resampling Strategies for Assessing and Comparing Indirect Effects in Multiple Mediator Models,”Behavior Research Methods, 40 (3), 879–91.
57.
RaassensNéomie, WuytsStefan, and GeyskensInge (2012), “The Market Valuation of Outsourcing New Product Development,”Journal of Marketing Research, 49 (October), 682–95.
58.
RichmanLaura Smart, and LearyMark R. (2009), “Reactions to Discrimination, Stigmatization, Ostracism, and Other Forms of Interpersonal Rejection: A Multimotive Model,”Psychological Review, 116 (2), 365–83.
59.
RoehmMichelle L., and TyboutAlice M. (2006), “When Will a Brand Scandal Spill Over, and How Should Competitors Respond?”Journal of Marketing Research, 43 (August), 366–73.
60.
RomanoskySasha, TelangRahul, and AcquistiAlessandro (2011), “Do Data Breach Disclosure Laws Reduce Identity Theft?”Journal of Policy Analysis and Management, 30 (2), 256–86.
61.
ScharfS. (2007), “Report Casts Doubt on the Impact of Data Breaches on Identity Theft,”Internal Auditor, 64 (4), 23.
62.
SchatzDaniel, and BashroushRabih (2016), “The Impact of Repeated Data Breach Events on Organisations’ Market Value,”Information and Computer Security, 24 (1), 73–92.
63.
SchlosserAnn E., WhiteTiffany Barnett, and LloydSusan M. (2006), “Converting Web Site Visitors into Buyers: How Web Site Investment Increases Consumer Trusting Beliefs and Online Purchase Intentions,”Journal of Marketing, 70 (April), 133–48.
64.
SchumannJan H., von WangenheimFlorian, and GroeneNicole (2014), “Targeted Online Advertising: Using Reciprocity Appeals to Increase Acceptance among Users of Free Web Services,”Journal of Marketing, 78 (January), 59–75.
65.
SenRavi, and BorleSharad (2015), “Estimating the Contextual Risk of Data Breach: An Empirical Approach,”Journal of Management Information Systems, 32 (2), 314–41.
66.
SharpeWilliam F. (1964), “Capital Asset Prices: A Theory of Market Equilibrium Under Conditions of Risk,”Journal of Finance, 19 (3), 425–42.
67.
SmithEliot R. (2014), “Evil Acts and Malicious Gossip: A Multiagent Model of the Effects of Gossip in Socially Distributed Person Perception,”Personality and Social Psychology Review, 18 (4), 311–25.
68.
SmithN. Craig, and Cooper-MartinElizabeth (1997), “Ethics and Target Marketing: The Role of Product Harm and Consumer Vulnerability,”Journal of Marketing, 61 (July), 1–20.
69.
SoloveDaniel J. (2003), “Identity Theft, Privacy, and the Architecture of Vulnerability,”Hastings Law Journal, 54 (1227), 1–47.
70.
SoloveDaniel J. (2006), “A Taxonomy of Privacy,”University of Pennsylvania Law Review, 154 (3), 477–564.
71.
SrinivasanRaji, LilienGary L., and SridharShrihari (2011), “Should Firms Spend More on Research and Development and Advertising During Recessions?”Journal of Marketing, 75 (May), 49–65.
72.
SrinivasanShuba, and HanssensDominique M. (2009), “Marketing and Firm Value: Metrics, Methods, Findings, and Future Directions,”Journal of Marketing Research, 46 (June), 293–312.
TuckerCatherine (2014), “Social Networks, Personalized Advertising and Privacy Controls,”Journal of Marketing Research, 51 (October), 546–62.
76.
TurnerMonique Mitchell, MazurMichelle A., WendelNicole, and WinslowRobert (2003), “Relational Ruin or Social Glue? The Joint Effect of Relationship Type and Gossip Valence on Liking, Trust, and Expertise,”Communication Monographs, 70 (2), 129–41.
77.
WhiteTiffany Barnett (2004), “Consumer Disclosure and Disclosure Avoidance: A Motivational Framework,”Journal of Consumer Psychology, 14 (1/2), 41–51.
78.
WilliamsKipling D. (2007), “Ostracism,”Annual Review of Psychology, 58, 425–52.
Supplementary Material
Please find the following supplemental material available below.
For Open Access articles published under a Creative Commons License, all supplemental material carries the same license as the article it is associated with.
For non-Open Access articles published, all supplemental material carries a non-exclusive license, and permission requests for re-use of supplemental material or any part of supplemental material shall be sent directly to the copyright owner as specified in the copyright notice associated with the article.
