Appendix 1

Discussion Guide

Initial Warm-up Questions

Let us start this off by going around and having everyone talk a little about the questions that you see on the paper in front of you. After we get responses to these questions, we will have a free flowing discussion. Feel free to react to someone's comments at this point.

1. What do you use the Internet for?

2. How do you select the sites you shop at or visit?

3. Have any of you had any experiences with your privacy being invaded?

Attitudes toward Privacy

1. How big a concern is privacy when you are online?

2. What do you think is the biggest threat to your privacy? Why do you think so?

3. Have any of your friends had privacy 'nightmares?' How much has that influenced your perspective on privacy?

4. Have you read or heard anything about privacy in the media? Do you believe that can happen to you?

5. Have you changed your behavior with respect to information disclosure after reading media reports ?

6. Should all sites have a privacy policy? Do you think most sites have such a policy? How do you think it is stated? How do you think it should be stated?

7. Do you expect greater privacy protection from paid sites as opposed to free sites?

8. Are there levels of 'privacy?'

9. Which do you think is more open to privacy invasion

   • Registering for free services

   • Online shopping

   • Just browsing

   • Visiting chat groups

   • Playing multi- user games

Disclosure of Information

1. Do you disclose personal information online? If so, what types of information?

2. Are you selective about the sites at which you disclose personal information? What kinds of criteria do you use?

3. When are you more likely to disclose information?

4. Do you worry when you provide any personal information?

5. What do you think you get (should get) in exchange for providing personal information?

6. What do you think companies are doing with the information you provide?

7. Should companies be collecting any kind of information? What do they gain by it?

8. Do companies have a social/ethical responsibility to protect your privacy?

Strategies to Cope with Privacy Issues/Concerns

1. How do you cope with the fact that your privacy may be invaded?

2. Do you read the privacy statements of companies/Web sites? Why or why not?

3. Do you shop only on sites that are protected? How do you know they are protected?

4. Are you aware of TRUSTe, BBBOnline, Verisign, cookies? Do you use the opt-out clause?

5. Do you think click and mortar companies respect your privacy better than a pure online company?

6. Do you think privacy is really such a big issue? Or is it all hype?

7. Do you think Spam is an invasion of privacy? How do you deal with it?

8. You disclose information (such as SSN) almost everyday on campus. Why should online privacy be different or more threatening ?

9. Is it OK for companies to use cookies but not OK to ask you to provide personal information?

Intersection of Technology and Privacy

1. Do you consider yourself to be technologically competent? Can you install software on your own?

2. Do you think technologically competent people can better protect themselves ?

3. Would you be willing to buy software that can prevent Spam or protect your privacy?

4. Does more experience with the Internet help you protect your privacy better?

5. Do you think you have 'control' over the information you have provided? How would you define control?

6. Do you think the government should be doing anything to protect your privacy? Why or why not?

7. Some say that contacting consumers on an unsolicited basis is OK if there is an escape route or what is called an 'opt-out' option. E.g., there is a link that consumers can click on to not receive such messages in the future. Others say that only consumers who have explicitly said that they would like to receive a message from you (or opted -in) may be contacted. What are your thoughts on this opt-in vs. opt-out debate?

8. Some go even further and argue for double opt-in. Get consumers to reconfirm after they have opted-in. Your thoughts?

9. Are you more likely to respond positively to an opt-in or opt-out message? How does this compare to a banner ad or other forms of Internet advertising?

10. Do you know how many lists you have opted in to?

What Should We Do About It

1. Do you think the problem of privacy will get worse or get better over time? Why?

2. Who has the responsibility to do something about the problem?

3. There are different types of solutions offered - technical, political/regulatory, education/ advocacy , etc. Which solutions do you think would be most effective? Why or why not?

4. Would you pay extra to protect your privacy?