## 2 Related Work and Research Model
### Antecedents of Cftp in Prior Research  
Our systematic literature review can be classified as follows [19]. It focuses on research outcomes in order to identify relevant constructs impacting privacy concerns. The goal is to integrate these findings since we compare past results to our empirical findings at a later stage in our article. We conducted a forward search based on the article by [15] since they were the first ones using CFIP as a second-order construct in an APCO model. We only consider papers evaluating antecedents of privacy concerns in the forward search. Afterwards, we checked for duplicates due to the search in multiple databases. We then excluded papers if they were not in English or not peer-reviewed. We searched in the following databases (number of found forward citations): Google Scholar (593), INFORMS PubsOnline (203), Web of Science (166), ACM Digital Library (91), CiteSeerX (83), and Business Source  
Figure 1: Simplified and adapted representation of the “enhanced APCO” model following [PERSON] et al., 2015.  
Premier (69). Four hundred and sixty-two papers remained to be analyzed after the cleanup. We briefly discuss the most relevant antecedents which are also included in our research model (Figure 2).  
**Inconclusive effects of demographics on privacy concerns:** The influence of age on privacy concerns is inconclusive. There is research finding no effect of age on privacy concerns [20; 21] as well as research identifying age as a significant factor for explaining privacy concerns [16; 22; 23; 24; 25; 26]. There is also disagreement on whether the effect of age on privacy concerns is positive or negative. Our review suggests a positive effect, i.e., older people are more concerned about their privacy. Gender is one of the most evaluated antecedents of privacy concerns. As for age, the results are inconclusive with respect to the question of whether there is an effect at all as well as whether women [26; 27] or men [24] are more concerned. Education is assumed to have a statistically significant effect on privacy concerns. However, the effect sign of education is either negative [23] or positive [24]. Smartphone experience is not widely employed as an antecedent. Yet, we found the similar antecedent _internet experience_ and prior research indicates that a higher level alleviates privacy concerns [21; 28; 29]. Contradicting research observes no statistically significant effect [23].  
**Risk aversion leads to higher privacy concerns:** The construct _risk propensity_[30] used in our model is comparable to _risk taking_[31], which is evaluated in one article within the context of multiple personality characteristics. Among others, the authors find that risk taking is shown to have a negative and significant effect on privacy concerns. At this point, it is relevant to note that risk taking is defined in the opposite way compared to risk propensity. Thus, we would hypothesize a positive relationship between risk propensity and privacy concerns, i.e., the more risk-averse a person is, the more privacy concerns she/he has.  
**Negative privacy experiences cause higher privacy concerns:** Privacy experiences are reflected in our model by the construct _privacy victim experience_[32]. This concept is one of the most evaluated privacy-related antecedents. It questions whether the respondents were ever privacy victims, and how often those incidents happened. Most findings suggest that prior privacy experiences have a positive and significant effect on privacy concerns [16; 27; 33; 34; 35; 36; 37].