A growing body of theory has focused on privacy as being contextually defined, where individuals have highly particularized judgments about the appropriateness of what, why, how, and to whom information flows within a specific context. Such a social contract understanding of privacy could produce more practical guidance for organizations and managers who have employees, users, and future customers all with possibly different conceptions of privacy across contexts. However, this theoretical suggestion, while intuitively appealing, has not been empirically examined. This study (...) validates a social contract approach to privacy by examining whether and how privacy norms vary across communities and contractors. The findings from this theoretical examination support the use of contractual business ethics to understand privacy in research and in practice. As predicted, insiders to a community had significantly different understandings of privacy norms as compared to outsiders. In addition, all respondents held different privacy norms across hypothetical contexts, thereby suggesting privacy norms are contextually understood within a particular community of individuals. The findings support two conclusions. First, individuals hold different privacy norms without necessarily having diminished expectations of privacy. Individuals differed on the factors they considered important in calculating privacy expectations, yet all groups had robust privacy expectations across contexts. Second, outsiders have difficulty in understanding the privacy norms of a particular community. For managers and scholars, this renders privacy expectations more difficult to identify at a distance or in deductive research. The findings speak directly to the needs of organizations to manage a diverse set of privacy issues across stakeholder groups. (shrink)

Recent scholarship in business ethics has revealed the importance of privacy expectations as they relate to implicit privacy norms and the business practices that may violate these expectations. Yet, it is unclear how and when businesses may violate these expectations, factors that form or influence privacy expectations, or whether or not expectations have in fact been violated by company actions. This article reports the findings of three studies exploring how and when the corporate dissemination of consumer data violates privacy expectations. (...) The results indicate that consumer sentiment is more negative following intentional releases of sensitive consumer data, but the effect of data dissemination is more complex than that of company intentionality and data sensitivity alone. Companies can effectively set, and re-affirm, privacy expectations via consent procedures preceding and succeeding data dissemination notifications. Although implied consent has become more widely used in practice, we show how explicit consent outperforms implied consent in these regards. Importantly, this research provides process evidence that identifies perceived violation of privacy expectations as the underlying mechanism to explain the deleterious effects, on consumer sentiment, when company actions are misaligned with consumers’ privacy expectations. Ethical implications for companies collecting and disseminating consumer information are offered. (shrink)

ABSTRACT:Legal scholars and business ethicists are interested in many of the same core issues regarding human and firm behavior. The vast amount of legal research being generated by nearly 10,000 law school and business law scholars will inevitably influence business ethics research. This paper describes some of the recent trends in legal scholarship and explores its implications for three significant aspects of business ethics research—methodology, theory, and policy.

As drug testing has become increasingly used to maximize corporate profits by minimizing the economic impact of employee substance abuse, numerous arguments have been advanced which draw the ethical justification for such testing into question, including the position that testing amounts to a violation of employee privacy by attempting to regulate an employee's behavior in her own home, outside the employer's legitimate sphere of control. This article first proposes that an employee's right to privacy is violated when personal information is (...) collected or used by the employer in a way which is irrelevant to the terms of employment. This article then argues that drug testing is relevant and therefore ethically justified within the terms of the employment agreement, and therefore does not amount to a violation of an employee's right to privacy. Arguments to the contrary, including the aforementioned appeal to the employer's limited sphere of control, do not account for reasonable constraints on employee privacy which are intrinsic to the demands of the workplace and implicit in the terms of the employment contract. (shrink)

Consumer surveys indicate that concerns about privacy are a principal factor discouraging consumers from shopping online. The keypublic policy issue regarding privacy is whether the US should follow its current self-regulation course (where the FTC encourages websites to obtain private “privacy web-seals”), or whether a European style formal legal regulation approach should be adopted in the US.We conclude that the use of assurance seals has worked reasonably well and websites should be free to decide whether they have aprivacy seal or (...) not. Given the narrow scope and the wide variety among these seals, we do argue that the seals should commit themselves to the key features of a good privacy policy and that an opt-in provision be required. We believe that insufficient evidence exists to propose formal Government mandated Internet privacy regulation. (shrink)