2. 1. Objectives and methodology
2. Notes on public use of data
3. Executive summary
4. Findings in detail
Online security concerns
Big companies and consumer data
Attitudes to regulatory action
5. Summary of results
6. Recommendations
7. Results by gender and age
CONTENTS
This report is divided into the following key sections.
2
3
4
5
6
11
16
25
27
29
3. o To understand public opinion regarding online privacy in nine countries globally.
• Europe: UK, Germany, France, Spain.
• Non-Europe: India, Japan, South Korea, Brazil, Australia.
OBJECTIVES
This research is designed to understand views concerning online privacy globally
and attitudes to Google’s new privacy policy and the response of regulators
3
10, 354
interviews in
total
(see below for
detail)
Each country
weighted to be
nationally
representative
of adults 18+
Fieldwork:
UK: 15th -17th
February
All others: 13th
– 19th March
Online
survey
METHODOLOGY
UK* GER ESP FRA BRA IND JPN SKR AUS
Unweighted
sample
2050 1050 1037 1050 1037 1022 1028 1036 1044
* For analysis purposes UK data was weighted down so that each country contributed equally
to the global score achieved
4. NOTES ON PUBLIC USE OF DATA
ComRes’s research is conducted in accordance with the industry code of
conduct, and the company should be consulted before any data is released into
the public domain.
4
Guidelines for the public use of survey results
ComRes is a member of the British Polling Council and abides by its rules (www.britishpollingcouncil.org). This commits
us to the highest standards of transparency. The BPC’s rules state that all data and research findings made on the basis
of surveys conducted by member organisations that enter the public domain must include reference to the following:
• The company conducting the research (ComRes)
• The client commissioning the survey
• Dates of interviewing
• Method of obtaining the interviews (e.g. in-person, post, telephone, internet)
• The universe effectively represented (all adults, voters etc.)
• The percentages upon which conclusions are based
• Size of the sample and geographic coverage.
Published references (such as a press release) should also show a web address where full data tables may be viewed,
and they should also show the complete wording of questions upon which any data that has entered the public domain are
based.
All press releases or other publications must be checked with ComRes before use. ComRes requires 48 hours to
check a press release unless otherwise agreed.
5. EXECUTIVE SUMMARY
KEY TAKEAWAY: Globally consumers are concerned about their online privacy
and think that national regulators should be doing more to enforce Google to
comply with existing privacy and data protection rules
5
Consumers are
concerned about
online privacy
• A majority of consumers surveyed globally say that they are concerned about their privacy online.
• Germany is the only country where a majority say they are unconcerned, perhaps due to relatively strict data
protection laws already in place that protect personal data.
Mixed views exist on
big companies
collecting personal
data
• More consumers think that big companies gathering personal data harms consumers rather than enhances
their online experience – though both views are well supported.
• Consumers in South Korea, UK, Australia and France are the most critical of big companies gathering
personal data while consumers in Brazil, India and Spain are the most sympathetic to them doing so.
Consumers say the
EU was right to
investigate Google’s
new privacy policy
• A clear majority of consumers, either in Europe or elsewhere in the world, think European regulators were
right to investigate Google’s new privacy policy.
• Consumers in Japan and South Korea are less sure, although more say they were right than wrong. A
majority in Japan say they ‘don’t know’ if regulators were right to investigate.
National regulators
should do more to
protect privacy
• Globally, consumers think that national regulators should do more to force Google to comply with existing
rules and regulations concerning data protection and privacy.
• The exception is Japan, where consumers are most likely to say current action is ‘about right,’ perhaps a
reflection on recently introduced anti-piracy legislation in Japan which makes it one of the strictest regimes in
terms of online regulation in the world.
7. Concern over personal privacy online (Global)
Globally, more than three-quarters of consumers surveyed are concerned about
their privacy online
7
1%3% 17% 41% 37%All respondent
Don't know Not at all concerned Not very concerned Fairly concerned Very concerned
Q1: How concerned, if at all, are you about your privacy online?
Base: All respondents (n=10354)
78% concerned about
personal privacy online
20% not concerned about
personal privacy online
o More than three quarters (78%) globally say they are concerned about their privacy online.
o Nearly two-fifths (37%) are very concerned about their privacy online.
8. Concern over personal privacy online (by market)
A clear majority of consumers in all countries surveyed are concerned about their
privacy online (with the exception of Germany)
8
Q1: How concerned, if at all, are you about your privacy online?
Base: All respondents (UK 2050; Ger 1050; Esp 1037; Fra 1050; Bra 1037; Ind 1022; Jpn 1028; SKr 1036; Aus 1044)
*Concerned = very/fairly concerned, Not concerned = not at all/not very concerned
UK GER ESP FRA
Concerned* 68% 42% 90% 72%
Not concerned 29% 56% 10% 26%
Don’t know 3% 1% 0% 2%
BRA
Concerned 90%
Not concerned 10%
Don’t know 0%
IND
Concerned 94%
Not concerned 5%
Don’t know 1%
JPN SKR
Concerned 84% 81%
Not concerned 14% 18%
Don’t know 2% 1%
AUS
Concerned 85%
Not concerned 14%
Don’t know 0%
o Consumers in India followed by Brazil and Spain are the most likely to say they are concerned about their privacy online.
o In Germany views on online privacy are fairly polarised with over half (56%) not concerned and 42% concerned.
9. Concern over personal privacy online (Europe)
In Europe, Spanish consumers are most concerned about their privacy online;
German consumers are least concerned
9
3%
1%
2%
4%
7%
10%
25%
50%
9%
16%
46%
34%
42%
36%
22%
8%
48%
35%
UK
Germany
Spain
France
Don't know Not at all concerned Not very concerned Fairly concerned Very concerned
o Germany has relatively strict data protection laws restricting the use of personal information* which perhaps explains why
the majority (56%) appear not concerned about their privacy online. However, it is worthwhile to note that a substantial.
minority (42%) is still fairly or very concerned about their privacy online.
Q1: How concerned, if at all, are you about your privacy online?
Base: All respondents (UK 2050; Ger 1050; Esp 1037; Fra 1050)
*Background on German privacy laws and Facebook http://www.bbc.co.uk/news/technology-14859813
http://www.guardian.co.uk/world/2013/jan/04/facebook-germany-data-protection?INTCMP=SRCH
**Concerned = very/fairly concerned, Not concerned = not at all/not very concerned
29% 68%
56% 42%
10% 90%
26% 72%
Not
concerned**
Concerned
10. Concern over personal privacy online (non Europe)
Across the other countries surveyed, consumers in India and Brazil are most
likely to say they are very concerned about their privacy online
10
1%
2%
1%
2%
1%
1%
1%
2%
13%
4%
13%
18%
7%
43%
21%
62%
57%
28%
42%
73%
22%
24%
62%
Australia
India
Japan
South Korea
Brazil
Don't know Not at all concerned Not very concerned Fairly concerned Very concerned
Q1: How concerned, if at all, are you about your privacy online?
Base: All respondents (Bra 1037; Ind 1022; Jpn 1028; SKr 1036; Aus 1044)
*Concerned = very/fairly concerned, Not concerned = not at all/not very concerned
14% 85%
5% 94%
14% 84%
18% 81%
10% 90%
o A vast majority of consumers in all non-European countries included in the study are concerned about their privacy online.
Not
concerned*
Concerned
12. Views on personal data collected by big companies (Global)
Two-fifths of consumers surveyed globally think big companies are causing harm
by gathering large amounts of personal data for internal use
12
41%
29%
19%
11%
Consumers are being harmed
by big companies gathering
large amounts of their
personal data for internal use
Consumer experiences are
being enhanced by big
companies gathering large
amounts of their personal
data for internal use
Neither Don't know
Q2: Which one of the following statements comes closest to your view?
Base: All respondents (n=10354)
o Two-fifths (41%) of consumers surveyed globally say that consumers are being harmed by big companies gathering large
amounts of personal data for internal use.
o However, there is some sympathy for big companies gathering data:
• One in three (30%) think consumer experiences are being enhanced,
• One in five (19%) think consumers are neither being harmed nor having experiences enhanced,
• One in ten (11%) say they don’t know.
13. Views on personal data collected by big companies (by market)
Views on the collection of personal data by big companies vary by country with
consumers often being divided within countries too
13
Q2: Which one of the following statements comes closest to your view?
Base: All respondents (UK 2050; Ger 1050; Esp 1037; Fra 1050; Bra 1037; Ind 1022; Jpn 1028; SKr 1036; Aus 1044)
Gathering of personal data… UK GER ESP FRA
Harms consumers 46% 39% 38% 44%
Enhances consumer experiences 18% 22% 47% 35%
Neither 21% 30% 9% 11%
Don’t know 16% 9% 6% 9%
Gathering of personal data… BRA
Harms consumers 32%
Enhances consumer experiences 51%
Neither 9%
Don’t know 7%
Gathering of personal data… IND
Harms consumers 32%
Enhances consumer experiences 48%
Neither 12%
Don’t know 8%
Gathering of personal data… JPN SKR
Harms consumers 21% 78%
Enhances consumer experiences 11% 8%
Neither 51% 5%
Don’t know 17% 9%
Gathering of personal data… AUS
Harms consumers 40%
Enhances consumer experiences 25%
Neither 18%
Don’t know 17%
o Consumers in South Korea are the most critical of big companies collecting large amounts of personal data. Consumers in the
UK, Australia, Germany and France are more likely to say it harms consumers than enhances their experience.
o Those in Brazil, India and Spain are more likely to say that personal data collected is being used to improve experiences.
o Consumers in Japan are most likely to say that gathering personal data neither harms nor enhances consumer experiences.
14. Views on personal data collected by big companies (Europe)
14
46%
18% 21%
16%
39%
22%
30%
9%
38%
47%
9% 6%
44%
35%
11% 9%
Consumers are being harmed
by big companies gathering
large amounts of their
personal data for internal use
Consumer experiences are
being enhanced by big
companies gathering large
amounts of their personal
data for internal use
Neither Don't know
UK Germany Spain France
Q2: Which one of the following statements comes closest to your view?
Base: All respondents (UK 2050; Ger 1050; Esp 1037; Fra 1050)
In Europe, views concerning the collection of personal data by big companies for
internal use vary by market
o In Europe, consumers in the UK, Germany and France are more likely to think that big companies gathering personal data
harms consumers.
• In Germany, 3 in 10 are neutral on the subject, probably reflecting comparatively less concern about online privacy overall.
o in Spain, consumers are more likely to think that gathering personal data for internal use enhances consumers experiences.
15. Views on personal data collected by big companies (non Europe)
15
40%
25%
18% 17%
32%
48%
12% 8%
21%
11%
51%
17%
78%
8% 5% 9%
32%
51%
9% 7%
Consumers are being harmed
by big companies gathering
large amounts of their
personal data for internal use
Consumer experiences are
being enhanced by big
companies gathering large
amounts of their personal
data for internal use
Neither Don't know
Australia India Japan South Korea Brazil
o Consumers in South Korea are the most critical of big companies gathering personal data. This is not surprising given that the
country has a history of large scale compromising of personal data through hacking of social networking and government sites.*
o In contrast, there are relatively more consumers in India and Brazil that think personal data being collected by big companies is
more likely to enhance consumer experiences.
o Consumers in Japan are most likely to think that the gathering of data by big companies neither harms consumers nor
enhances their online experience.
Q2: Which one of the following statements comes closest to your view?
Base: All respondents (Bra 1037; Ind 1022; Jpn 1028; SKr 1036; Aus 1044)
* Example from 2011 http://www.bbc.co.uk/news/technology-14323787
Across other countries surveyed, views on whether companies gathering large
amount of personal data harms or benefits consumers are fairly diverse
17. Attitudes to EU regulatory action (Global)
Globally, a clear majority of consumers believe European regulators were right to
investigate Google’s new privacy policy
17
66%
13%
21%
Right Wrong Don't know
One year ago, Google announced it was introducing a new privacy policy which it said streamlined existing
policies whilst enabling it to provide better consumer experiences across its products. However, data protection
authorities (non Europe countries only: in Europe) were concerned and investigated, reporting on 16th October
2012, that the “investigation confirmed our concerns about the combination of data across services. The new
Privacy Policy allows Google to combine almost any data from any services for any purposes.”
Q3: Generally speaking, do you think privacy and data protection regulators (non Europe countries only: in
Europe) were right or wrong to investigate Google’s privacy policy and how it allows the company to collect and
combine data on consumers?
Base: All respondents (n=10354)
o Two out of three consumers (66%) surveyed believe that regulators in Europe were right to investigate Google’s new
privacy policy with only a little over 1 in 10 (13%) thinking this was the wrong thing to do.
o One in five (21%) of those surveyed say they don’t know whether regulators were right to take action.
18. Attitudes to EU regulatory action (by market)
In all markets surveyed, consumers were more likely to say that European
regulators were right rather than wrong to investigate Google’s new privacy policy
18
* Please see the introduction to the question on slide 17
Q3: Generally speaking, do you think privacy and data protection regulators (non Europe countries only: in Europe)
were right or wrong to investigate Google’s privacy policy and how it allows the company to collect and combine data
on consumers?
Base: All respondents (UK 2050; Ger 1050; Esp 1037; Fra 1050; Bra 1037; Ind 1022; Jpn 1028; SKr 1036; Aus 1044)
UK GER ESP FRA
Right 71% 69% 78% 76%
Wrong 11% 14% 12% 12%
Don’t know 18% 16% 10% 12%
BRA
Right 80%
Wrong 8%
Don’t know 11%
IND
Right 73%
Wrong 10%
Don’t know 17%
JPN SKR
Right 29% 48%
Wrong 17% 23%
Don’t know 54% 29%
AUS
Right 74%
Wrong 9%
Don’t know 17%
o Consumers in Japan and South Korea are less likely to agree to agree European regulators were right than consumers in other
markets, although more agree than disagree. A sizeable proportion of consumers in Japan and South Korea say that they don’t
know.
19. Attitudes to EU regulatory action (Europe)
A clear majority of consumers in Europe say that regulators were right to
investigate Google’s new privacy policy
19
71%
11%
18%
69%
14% 16%
78%
12% 10%
76%
12% 12%
Right Wrong Don't know
UK Germany Spain France
* Please see the introduction to the question on slide 17
Q3: Generally speaking, do you think privacy and data protection regulators were right or wrong to investigate
Google’s privacy policy and how it allows the company to collect and combine data on consumers?
Base: All respondents (UK 2050; Ger 1050; Esp 1037; Fra 1050)
o In European markets, at least seven in ten say regulators were right to investigate Google’s privacy policy and how it allows
the company to collect and combine data on consumers.
20. In other countries surveyed, there is a clear divide between Asian and non Asian
markets – though more think action was right rather than wrong in all markets
20
74%
9%
17%
73%
10%
17%
29%
17%
54%
48%
23%
29%
80%
8% 11%
Right Wrong Don't know
Australia India Japan South Korea Brazil
o Consumers in Australia, India and Brazil are supportive of action taken by European data regulators to investigate Google.
o Views in Japan and South Korea are more mixed. Although more agree than disagree that European regulators were right
to investigate Google, a high proportion of consumers say they don’t know whether actions were right or wrong than in
other markets.
Attitudes to EU regulatory action (non Europe)
* Please see the introduction to the question on slide 17
Q3: Generally speaking, do you think privacy and data protection regulators in Europe were right or wrong to
investigate Google’s privacy policy and how it allows the company to collect and combine data on consumers?
Base: All respondents (Bra 1037; Ind 1022; Jpn 1028; SKr 1036; Aus 1044)
21. Is current regulation sufficient? (global)
Globally, consumers think that regulators should do more to force Google to
comply with existing regulations on privacy and the protection of personal data
21
Q4: Europe: And do you think that national regulators should be doing more or less to force Google to comply
with existing European Directives on privacy and protection of personal data?
Non Europe: And do you think that national regulators in general should be doing more or less to force Google to
comply with existing rules and regulations on privacy and protection of personal data?
Base: All respondents (n=10354)
65%
18%
5%
11%
Should be doing moreCurrent action is about rightShould be doing less Don't know
o Two out of three (65%) of consumers surveyed believe that national regulators should do more to force Google to comply
with existing regulations concerning online privacy and the protection of personal data.
o Around one in five (18%) think the current level of action is about right.
o One in ten (11%) say they don’t know suggesting more education is required on what action is being taken and how this
benefits consumers.
22. Is current regulation sufficient? (by market)
In all countries surveyed (apart from Japan) consumers believe that national
regulators should do more to force Google to comply with existing regulations
22
Q4: Europe: And do you think that national regulators should be doing more or less to force Google to comply with
existing European Directives on privacy and protection of personal data?
Non Europe: And do you think that national regulators in general should be doing more or less to force Google to
comply with existing rules and regulations on privacy and protection of personal data?
Base: All respondents (UK 2050; Ger 1050; Esp 1037; Fra 1050; Bra 1037; Ind 1022; Jpn 1028; SKr 1036; Aus 1044)
UK GER ESP FRA
More 66% 73% 80% 70%
Current action is about right 14% 18% 12% 16%
Less 4% 2% 3% 6%
Don’t know 16% 6% 5% 8%
BRA
More 80%
Current action is about right 13%
Less 3%
Don’t know 5%
IND
More 60%
Current action is about right 19%
Less 13%
Don’t know 8%
JPN SKR
More 31% 59%
Current action is about right 36% 19%
Less 6% 11%
Don’t know 27% 12%
AUS
More 69%
Current action is about right 17%
Less 3%
Don’t know 11%
o In Japan, views are fairly evenly split between ‘more regulation’ (31%), ‘current action is about right’ (36%) and ‘don’t know’
(27%).
23. Is current regulation sufficient? (Europe)
23
66%
14%
4%
16%
73%
18%
2% 6%
80%
12%
3% 5%
70%
16%
6% 8%
More Current action is about right Less Don’t know
UK Germany Spain France
Q4: And do you think that national regulators should be doing more or less to force Google to comply with
existing European Directives on privacy and protection of personal data?
Base: All respondents (UK 2050; Ger 1050; Esp 1037; Fra 1050)
In all European markets, consumers say national regulators should do more to
force Google to comply with EU directives concerning data protection and privacy
o At least two-thirds in all European markets surveyed say that national regulators should be doing more to force Google to
comply with existing European Directives on privacy and the protection of personal data.
24. Consumers in non European markets, aside from Japan, agree that national
regulators should be doing more to force Google to comply with existing rules
concerning data protection and privacy online
24
69%
17%
3%
11%
60%
19%
13%
8%
31%
36%
6%
27%
59%
19%
11% 12%
80%
13%
3% 5%
More Current action is about right Less Don’t know
Australia India Japan South Korea Brazil
o In all non European markets apart from Japan, consumers think national regulators should be doing more to force Google
to comply with current regulations concerning online privacy and data protection.
o The relatively high score for ‘current action is about right’ (36%) in Japan is probably a reflection on the recently introduced
anti-piracy legislation which makes Japan one of the most stringent anti-file sharing regimes in the world.*
Is current regulation sufficient? (non Europe)
Q4: And do you think that national regulators in general should be doing more or less to force Google to comply
with existing rules and regulations on privacy and protection of personal data?
Base: All respondents (Bra 1037; Ind 1022; Jpn 1028; SKr 1036; Aus 1044)
* Background on file-sharing legislation in Japan: http://www.bbc.co.uk/news/technology-19767970;
http://www.wired.co.uk/news/archive/2012-10/02/japan-strict-copyright-law
26. Summary of results
Summary of results
26
UK GER ESP FRA AUS IND JPN SKR BRA
Concern over
privacy online
Concerned
Not (very)
concerned
Very
concerned
Concerned
Very
concerned
Very
concerned
Very
concerned
Very
concerned
Very
concerned
Gathering of
personal data
by big
companies
Harmful Harmful
Enhances
consumer
experience
Harmful Harmful
Enhances
consumer
experience
Neither
Very
harmful
Enhances
consumer
experience
EU right to
investigate
Google
Right Right Right Right Right Right Don’t know
Mostly
right
Right
National
regulators
should do more
or less
More More More More More More
Current
action is
about right
More More
28. Key findings and recommendations
KEY TAKEAWAY: Big Brother Watch has a role to play in educating the public
globally on the issues and in acting as an advocate for their concerns. Any
communications activity undertaken should reflect market nuance
28
Recommendations:
• More work could be done globally to
establish what the key concerns are in
each market to better inform
communications activity.
• Big Brother Watch has a role to play in
educating consumers as to what the
main threats to their security online are
and what consumers can do to protect
themselves against them.
• More work could be done in Germany
to educate the public about the threats
that exist as concern is currently
weaker in this market than in others.
Recommendations:
• More work could be done to establish
what the public knows about how big
companies collect and use their data
and to educate them on this if they
don’t know.
• Big Brother Watch has a role to play
highlighting public concern in this area
to regulators and policy makers
nationally.
• Messaging on this subject should be
tailored to each country to account for
market nuance as opinions by market
differ on this subject.
Finding: Majority of consumers globally
think regulators in Europe were right to
investigate Google's new privacy policy
and most think more should be done to
force Google to meets existing
regulations.
Recommendations:
• Big Brother Watch should highlight the
public appetite for more action to
regulators and policy makers.
• Criticism from Google on regulatory
action can be refuted by the fact the
public regulators were right to
investigate their new privacy policy.
•Specific work should be done in Asia to
remind consumers of the actions
regulators can take and why this is
beneficial to them.
Finding: A majority of consumers
globally are concerned about their
privacy online.
Finding: More consumers globally
believe that big companies gathering
personal data is harmful to consumers
rather than enhancing their online
experience. However, opinions are
divided, particularly in Asia.