# Online Privacy Fatigue: A Scoping Review and Research Agenda
###### Abstract  
Online users are responsible for protecting their online privacy themselves: the mantra is _custodial te_ (protect yourself). Even so, there is a great deal of evidence pointing to the fact that online users generally do not act to preserve the privacy of their personal information, consequently disclosing more than they ought to and unwisely divuligg sensitive information. Such self-disclosure has many negative consequences, including the invasion of privacy and identity theft. This often points to a need for more knowledge and awareness but does not explain why even knowledgeable users fail to preserve their privacy. One explanation for this phenomenon may be attributed to _online privacy fatigue_. Given the importance of online privacy and the lack of integrative online privacy fatigue research, this scoping review aims to provide researchers with an understanding of online privacy fatigue, its antecedents and outcomes, as well as a critical analysis of the methodological approaches used. A scoping review based on the PRISMA-ScR checklist was conducted. Only empirical studies focusing on online privacy were included, with nontechnological studies being excluded. All studies had to be written in English. A search strategy encompassing six electronic databases resulted in eighteen eligible studies, and a backward search of the references resulted in an additional five publications. Of the 23 studies, the majority were quantitative (74%), with fewer than half being theory driven (48%). Privacy fatigue was mainly conceptualized as a loss of control (74% of studies). Five categories of privacy fatigue antecedents were identified: privacy risk, privacy control and management, knowledge and information, individual differences, and privacy policy characteristics. This study highlights the need for greater attention to be paid to the methodological design and theoretical underpinning of future research. Quantitative studies should carefully consider the use of CB-SEM or PLS-SEM, should aim to increase the sample size, and should improve on analytical rigor. In addition, to ensure that the field matures, future studies should be underpinned by established theoretical frameworks. This review reveals a notable absence of privacy fatigue research when modeling the influence of privacy threats and invasions and their relationship with privacy burnout, privacy resignation, and increased self-disclosure. In addition, this review provides insight into theoretical and practical research recommendations that future privacy fatigue researchers should consider going forward. privacy fatigue; breach fatigue; privacy cynicism; privacy risk; scoping review; privacy invasion +
Footnote †: journal:  
a myth, arguing that the paradox is an artefact of the way concerns and behaviors are measured and observed in different contexts. This leads to the appearance of a paradox but does not constitute evidence of its existence. Whether the paradox exists or not, it is undisputed that individuals do not always act to preserve their privacy. [PERSON] et al. (2018) have suggested that one explanation for this apparent paucity of privacy-protective behaviors by internet users is _privacy fatigue_. Privacy fatigue occurs where the user of an app, social media platform, website, or online environment experiences exhaustion and cynicism in relation to preserving their privacy over an extended period [PERSON] et al. (2018). Some researchers suggest that this might be related to feelings of helplessness triggered by unrelenting news of data breaches in the media [PERSON] et al. (2018). Others argue that it stems from a negative attitude towards privacy-protective behavior [PERSON] et al. (2018) and a general defeatist approach to online privacy [PERSON] et al. (2018). Whatever its source, suffering from excessive levels of privacy fatigue has the potential to undermine an individual's online privacy, making it a worthwhile phenomenon to examine.