Only 16% of brands offer consumers the option to opt-in to marketing activities, according to the Deloitte Privacy Index 2020, the sixth annual assessment of the privacy practices of Australia’s top 100 consumer brands
And 83% of consumers say they are concerned by cookies that track their activity online and that this could be used for marketing or to sell ito third parties.
This highlights the difference between consumer expectations and industry consent practices.
David Batch, Deloitte national privacy and data protection lead partner and index author, says obtaining consent in the right way is critical for building consumer trust.
“As we navigate the digital realities of pandemic restrictions, of working and socialising online, as consumers we have become far more aware of the need to secure our privacy,” he says.
“At the same time COVID-19 has pressured governments and businesses to use the data they either have, or can collect, to better understand what is required to protect, plan for, and support our health and our economy.
“Australians have overwhelmingly told us they don’t like being marketed to without opting in, or
bundled consent, which couples something we do want with something we don’t, especially when it is unnecessary.
“Meaningful consent is the real opportunity for brands in COVID-19 times and beyond. And it is the responsibility of every organisation in Australia that accesses and processes personal information to do its bit in increasing trust in the digital economy.”
For the 2020 Index, Roy Morgan Research surveyed more than 1000 Australian consumers aged 18 and above, asking them about their personal consent-giving practices when interacting with apps and websites and what constitutes meaningful consent to them.
This was compared with analysis of the websites and mobile applications of Australia’s top 100 consumer brands, examining the consent behaviours and attributes of their websites and apps as well as sector level breach and complaints data published by the Office of the Australian Information Commissioner (OAIC).
The results were scored and aggregated across 10 industry types to rank each industry to create the Index.
“Gaining meaningful consent from consumers, within current legal and technical constraints, isn’t easy,” says David Batch.
“Striking the balance between optimal user experience and obtaining meaningful consent differs across platforms and use cases.
"Across industry we have seen a lack of maturity in the consent space, such that any updates to Australian law would require significant industry changes and uplift.”
Other index findings:
- 93% of consumers expect a service to provide them with the option, upfront, to opt-in to non-essential uses of their personal information rather than having to opt-out of these uses.
- None of the top 100 consumer brands met consent best practices for cookie management.
- 52% of brands obtain consent for non-essential cookies through the bundled consent of accepting a privacy policy.
- 7% of the brands that do not mention marketing activities in their privacy policy were found to use marketing cookies when their website was tested.
- Only 21% of brands provided consumers with a comprehensive consent management portal or equivalent that was also fully or partially available from the associated application.
- Only 33% of consumers agree that their consent for non-essential processing is valid when it is obtained through acceptance of the terms and conditions and/or privacy policy.
- 64% obtain this consent through the bundled acceptance of their privacy policy, and of these, 65% limit the functionality of the website without obtaining this consent, meaning consumers have little choice but to consent to marketing activities.
- 50% of consumers stated that they had given consent (when they had previously refused) because they were tired of being continuously asked by the same service.
- Only 7% of consumers said they had a very good understanding of how their personal information would be used after they consented to its use.
- Only 12% of consumers think consent given for non-essential uses should be enduring.
“Although meaningful consent and permission are intrinsically personal, our research overwhelmingly demonstrates a disconnect between what consumers expect and what brands actually do,” says Batch.
“No one wants to give consent through constant pop-ups. Nor does a consumer consider consent is given when driven through a catch-all, non-specific privacy notice. The key is in empowering people to choose if, when and how they participate.
“Good consent must be expressly sought and voluntarily given. We’re seeing this in COVID-19 initiatives such as tracing apps, where the concept of care drives voluntary participation and builds trust between community and government.
“If we’re to maintain trust in institutions and corporations, meaningful consent is essential to the bigger picture. Now the community is waking up to the power and value of data, real transparency, fair value exchange and true voluntariness will be required to establish consent and trust.”
Have something to say on this? Share your views in the comments section below. Or if you have a news story or tip-off, drop us a line at adnews@yaffa.com.au
Sign up to the AdNews newsletter, like us on Facebook or follow us on Twitter for breaking stories and campaigns throughout the day.