Distinguishing between Privacy and Security Concerns: An Empirical Examination and Scale Validation

Even though privacy concerns (PC) and security concerns (SC) are acknowledged as separate constructs, many studies argue that they are related or, even worse, confused. Building upon the non-overlapping SC and PC dimensions, we propose an Internet Users Information Transmission Security Concern (IUITSC) scale. We argue that the scale when used in conjunction with the PC scale would cover the entire gamut of SCs and PCs (SC-PC). The construct is tested in a nomological network of personality and trust. The article first develops the theoretical foundation for multiple factor structures including various first-order factor models as well as the second-order factor model. The results, based on extensive statistical tests and nomological examination, suggest that the IUITSC may be represented as a second-order construct comprising of authentication, confidentiality, integrity, and non-repudiation. We argue that information assurance is the common theme that ties these constructs into a higher order IUITSC construct.