Data Privacy Concerns and Consumer Willingness to Share Personal Information

Background to the Study

Personal information has become one of the most valuable currencies of the digital economy. Every online registration, purchase, loyalty sign-up, and app download requires consumers to disclose some form of personal data, names, contact details, location, payment information, and increasingly, behavioural and biometric data. Firms rely on this information to personalise offers, streamline transactions, and build long-term customer relationships. Yet the very same disclosure that enables these commercial benefits exposes consumers to risks of data misuse, identity theft, unauthorised profiling, and financial loss, particularly in the aftermath of high-profile data breaches that have become increasingly common globally and within Nigeria's growing digital economy.

Data privacy concern, the apprehension a consumer feels about how their personal information is collected, stored, and used, has therefore emerged as a central construct in consumer behaviour research. Consumers do not respond to privacy risk in a uniform or wholly risk-averse manner; instead, they appear to weigh the perceived benefits of disclosure (convenience, discounts, personalised service) against the perceived costs (loss of control, risk of misuse), a process formalised in the literature as privacy calculus. This calculus is further shaped by the level of trust consumers place in the firm requesting their data, and by consumers' own prior experiences, particularly whether they, or someone close to them, have previously experienced a data breach or misuse of personal information.

In Nigeria, the enactment of the Nigeria Data Protection Regulation in 2019, subsequently strengthened by the Nigeria Data Protection Act 2023 and enforced by the Nigeria Data Protection Commission, reflects growing regulatory recognition of these concerns. The National Information Technology Development Agency (NITDA), which originally issued the 2019 regulation, continues to play a broader role in shaping Nigeria's IT policy landscape. Despite this regulatory progress, consumer-level understanding of data rights remains uneven, and firms, particularly in the fast-growing e-commerce, fintech, and social commerce sectors, continue to request extensive personal information with varying degrees of transparency about its use.

Understanding what drives or discourages Nigerian consumers' willingness to share personal information is therefore both commercially and socially important: for firms, it clarifies how to design data collection practices that sustain rather than erode consumer participation; for policymakers, it provides evidence to guide regulatory emphasis; and for consumers, it clarifies the trade-offs implicit in everyday digital transactions.

Statement of the Problem

Nigerian firms operating in the digital space face a persistent tension: data-driven marketing and service personalisation require ever more granular personal information, yet Nigerian consumers are becoming increasingly conscious of, and vocal about, data privacy risks, particularly following widely publicised cases of unauthorised data sale, SIM-based fraud, and loan-app harassment tied to contact-list harvesting. Firms that fail to understand the conditions under which consumers are willing, or unwilling, to disclose personal information risk either under-collecting data needed for legitimate personalisation, or over-collecting in ways that trigger consumer backlash, form abandonment, and reputational damage.

While the privacy calculus literature is well developed in Western contexts, empirical evidence on how Nigerian consumers specifically weigh privacy concern against perceived benefit, and how trust and prior breach experience moderate this calculus, remains limited. Many Nigerian firms currently design data collection forms and consent mechanisms with limited reference to local consumer attitudes, relying instead on templates borrowed from foreign markets with different regulatory and cultural contexts. This creates a gap between practice and evidence that this study sought to address by empirically examining the determinants of consumer willingness to share personal information within the Nigerian online shopping context.

Aim and Objectives of the Study

The aim of this study was to examine data privacy concerns and consumer willingness to share personal information among online shoppers in Enugu State, Nigeria. The specific objectives were to:

●        Examine the effect of privacy concern on consumer willingness to share personal information.

●        Assess the effect of perceived benefit on consumer willingness to share personal information.

●        Determine the moderating effect of trust on the relationship between privacy concern and willingness to share personal information.

●        Evaluate the effect of prior data breach experience on consumer willingness to share personal information.

●        Determine the combined predictive effect of privacy concern, perceived benefit, and trust on willingness to share personal information.

Research Questions

●        What is the effect of privacy concern on consumer willingness to share personal information?

●        What is the effect of perceived benefit on consumer willingness to share personal information?

●        What is the moderating effect of trust on the relationship between privacy concern and willingness to share personal information?

●        What is the effect of prior data breach experience on consumer willingness to share personal information?

●        What is the combined predictive effect of privacy concern, perceived benefit, and trust on willingness to share personal information?

Significance of the Study

This study is significant to several categories of stakeholders. To marketing practitioners and data-driven firms, the findings offer evidence-based guidance on how to structure data requests, value exchanges, and trust signals to sustain consumer willingness to disclose necessary information. To regulators, particularly NITDA and the Nigeria Data Protection Commission, the study provides context-specific evidence on consumer privacy attitudes that can inform enforcement priorities and public enlightenment campaigns. Students designing similar survey instruments can find additional structural guidance through ScholarNest's research coaching service, which supports learners refining their proposals, questionnaires, and analysis chapters.

To consumers, the study clarifies the trade-offs involved in everyday data disclosure decisions. To the academic community, the study extends the privacy calculus and communication privacy management literature into an under-researched emerging market context and provides a validated instrument and empirical model for future replication.

Scope of the Study

The study focused on examining data privacy concerns and their relationship with consumer willingness to share personal information. The content scope covered privacy concern, perceived benefit, trust, prior data breach experience, and willingness to share personal information. The geographical scope was limited to online shoppers resident in Enugu State, Nigeria, and the study covered consumer attitudes and reported experiences within the period 2023 to 2026.

The study was constrained by a number of factors. First, the geographical scope was limited to Enugu State due to time and financial constraints, which may limit the generalisability of findings to other regions of Nigeria with different levels of digital literacy and data protection awareness. Second, the study relied on self-reported survey data regarding sensitive matters such as privacy concern and prior breach experience, which may be subject to recall bias or social desirability bias. Third, the cross-sectional design captures consumer attitudes at a single point in time rather than tracking how disclosure behaviour evolves following specific events such as a data breach. These limitations were mitigated through anonymised data collection, careful instrument wording, and statistically representative sampling procedures.

Operational Definition of Terms

Data Privacy Concern: The degree of apprehension a consumer feels regarding the collection, storage, and use of their personal information by firms.

Personal Information: Any data relating to an identified or identifiable individual, including contact details, location, financial data, and behavioural data collected during online interactions.

Willingness to Share: A consumer's stated readiness or intention to disclose personal information to a firm in exchange for a product, service, or benefit.

Perceived Benefit: The value, monetary, convenience-related, or experiential, that a consumer expects to receive in exchange for disclosing personal information.

Trust: The confidence a consumer places in a firm's ability and intention to handle their personal data responsibly, an expectation increasingly formalised under Nigeria's data protection framework overseen by the Nigeria Data Protection Commission.

Data Breach Experience: A consumer's prior direct or indirect exposure to an incident in which personal information was accessed, used, or disclosed without authorisation.

Conclusion

Consumers are not simply privacy-averse or privacy-indifferent; they are constantly running a cost-benefit calculation, and firms that understand its inputs are far better positioned to earn genuine disclosure than those that simply demand it. Trust and perceived benefit can meaningfully offset privacy concern, but they do not erase it, and a single data breach can undo years of accumulated goodwill. For firms and researchers alike, the lesson is the same: data collection practices built around verifiable trust signals, proportionate value exchange, and strict regulatory compliance will outperform those built around convenience alone. Students exploring related themes in consumer behaviour, data protection, or digital marketing can find further sample studies in ScholarNest's project topics library, spanning marketing, computer science, and public administration.

Frequently Asked Questions

1. What is data privacy concern in consumer behaviour research?

It is the degree of apprehension a consumer feels about how their personal information is collected, stored, and used by firms. It is one of the most consistently studied predictors of whether consumers are willing to disclose personal data online.

2. What is privacy calculus theory?

Privacy calculus theory describes the mental cost-benefit weighing consumers perform when deciding whether to share personal information, balancing perceived benefits such as convenience or discounts against perceived costs such as loss of control or risk of misuse.

3. Does privacy concern always reduce willingness to share personal information?

Generally, yes. Research consistently finds that privacy concern has a significant negative effect on willingness to share, though this effect can be partially offset by strong trust in the firm or a high perceived benefit from disclosure.

4. How does trust affect the privacy concern and disclosure relationship?

Trust functions as a moderator: it strengthens consumers' willingness to share personal information even when privacy concern is present, though it does not eliminate the underlying apprehension entirely.

5. Does a past data breach change how consumers behave?

Yes. Consumers with prior direct or indirect exposure to a data breach consistently report significantly lower willingness to share personal information than those without such experience, reflecting a lasting effect on disclosure behaviour.

6. What theories are commonly used to study this topic?

Studies in this area are typically anchored on Privacy Calculus Theory, Communication Privacy Management Theory, and the Theory of Planned Behaviour, which together explain both the cost-benefit weighing and the boundary-setting behaviour consumers apply to their personal data.

7. What research methodology suits a study like this?

A descriptive survey design is common, using a structured questionnaire administered to online shoppers and analysed with descriptive statistics alongside inferential techniques such as Chi-square tests, Pearson correlation, and multiple regression.

8. What regulatory framework governs data privacy in Nigeria?

The Nigeria Data Protection Act 2023 currently governs data privacy in Nigeria, replacing the earlier 2019 regulation. It is enforced by the Nigeria Data Protection Commission, while NITDA continues to play a broader role in national IT policy.

9. What can firms do to increase consumer willingness to share personal information?

Recommended practices include investing in verifiable trust signals, offering proportionate and transparent value in exchange for data, adopting robust data breach prevention and response protocols, and complying strictly with applicable data protection regulation.

10. Where can I find a sample project on this topic for reference?

ScholarNest's marketing project library includes related sample studies on digital marketing and consumer behaviour, including work focused on Enugu Metropolis, that can serve as structural and methodological references for students developing their own research.