- Tension: Consumers are demanding privacy protections while companies treat those demands as obstacles to revenue growth.
- Noise: The industry frames data collection as a fair trade for free services, drowning out legitimate calls for consent.
- Direct Message: Brands that treat privacy as a growth strategy will outperform those still clinging to surveillance-era tactics.
To learn more about our editorial approach, explore The Direct Message methodology.
Here is a number that should unsettle every marketing executive in America: nearly thirty percent of online retailers are flat-out ignoring opt-out requests under state privacy laws.
That finding comes from a 2025 report by Consumer Reports, and it lands at a time when roughly two-thirds of consumers have indicated they want a functioning “do not track” mechanism in their browsers and apps. The gap between what people are asking for and what companies are delivering is no longer a footnote in a legal brief. It is a chasm. And the ground beneath it is eroding fast.
As far back as 2010, a Gallup poll showed that consumer anxiety about digital tracking was already significant, sparking conversations in legal and policy circles about how technology companies handle personal data. Over a decade later, the anxiety has matured into outright demand.
That same Gallup data was even more explicit than most brands were willing to acknowledge at the time. Two-thirds of consumers supported restrictions on behavioral advertising, with 67% saying advertisers should not be allowed to target ads based on their internet activity, and 61% saying free online access was not worth the loss of privacy. The signal was not subtle. Consumers were already drawing a clear line, long before most companies were ready to respect it.
What I’ve found analyzing consumer behavior data over the past several years is that the shift from passive unease to active resistance happened gradually, then all at once. The question now is why so many brands continue to act as though they never got the memo.
The Widening Rift Between What People Want and What Brands Do
There is a particular kind of corporate deafness that sets in when a business model depends on the very thing consumers are rejecting.
Behavioral psychology has a term for this: motivated reasoning. When the revenue model requires user tracking, every internal conversation about privacy compliance gets filtered through a lens of self-preservation. “Our users actually prefer personalized experiences.” “Opt-out rates are low, so people must be fine with it.” “If we stop collecting data, we lose our competitive edge.” These are the stories companies tell themselves, and they are remarkably durable.
I keep a journal of marketing campaigns that failed spectacularly. I call it my “anti-playbook.” Some of the most instructive entries involve companies that doubled down on aggressive data collection right as public sentiment was turning. One retailer launched a hyper-personalized email campaign based on browsing history that customers had explicitly asked to be deleted. The backlash was swift and expensive. The campaign became a case study in what happens when growth metrics override consumer trust.
The tension here is structural, embedded in the way digital advertising has been built. For over two decades, the dominant model has operated on an implicit bargain: free content in exchange for behavioral data. But consumers never signed that contract with full awareness of its terms. The bargain was always lopsided, and now the imbalance is visible to everyone.
When thirty percent of retailers ignore opt-out requests, they are telling consumers that their stated preferences do not matter. That is a dangerous message to send to a market that increasingly has alternatives.
During my time working with tech companies, I learned the hard way that data without empathy creates products nobody wants. The most sophisticated tracking infrastructure in the world is worthless if it erodes the trust that makes a customer relationship viable in the first place. The brands experiencing the deepest loyalty crises right now are the ones that treated consumer data as a resource to be extracted rather than a relationship to be respected.
The Convenient Myth of the “Fair Exchange”
The loudest distraction in this conversation is the persistent claim that data collection benefits consumers as much as it benefits companies. You hear it everywhere: personalization improves the user experience. Targeted ads save people time. Data-driven products are better products. These statements contain grains of truth, and that is precisely what makes them so effective at obscuring the larger picture.
The oversimplification works like this: the industry collapses a complex, multi-layered issue into a binary. Either you accept tracking and get a better experience, or you reject it and get a worse one. This framing conveniently ignores the vast middle ground where companies could offer meaningful personalization with far less invasive data practices. It ignores the growing body of evidence that consumers will pay more, stay longer, and recommend more often when they feel their boundaries are respected.
Consider how the California tech ecosystem has responded to this landscape. The state passed the California Consumer Privacy Act, then strengthened it with the California Privacy Rights Act. These laws exist because the market alone was not self-correcting. The industry’s own rhetoric about consumer benefit was not translating into consumer-friendly behavior. When legislators have to step in and mandate what common sense should have dictated, it signals something deeper than a compliance gap. It signals a cultural failure within organizations that have confused surveillance with service.
The noise also comes from within marketing departments themselves. Teams are evaluated on conversion metrics, click-through rates, and attribution models that reward granular tracking. The incentive structure makes privacy compliance feel like a tax on performance. In this environment, even well-meaning professionals find themselves rationalizing invasive practices because the dashboard rewards it. The system is designed to make the wrong choice look like the smart one.
The Competitive Advantage Hiding in Plain Sight
Strip away the rationalizations, the legacy infrastructure, and the quarterly earnings pressure, and what remains is an insight that too many companies are still resisting:
Privacy is the next great differentiator. The brands that build trust through genuine respect for consumer boundaries will capture the loyalty that surveillance-era tactics are destroying.
This is where the opportunity lives. The companies that move first on meaningful privacy practices will own a positioning advantage that competitors cannot easily replicate. Trust, once established through consistent action, becomes a moat. And the data bears this out: consumers increasingly choose brands that demonstrate transparency about data use, even when cheaper or more convenient alternatives exist.
Building a Marketing Engine That Respects Boundaries
So what does this look like in practice? It starts with a mindset shift that many organizations will find uncomfortable. Rather than asking “How much data can we collect?” the question becomes “How little data do we need to deliver genuine value?” This is a first-principles approach, and it often leads to surprising discoveries about efficiency.
The first move is honest compliance. If thirty percent of retailers are ignoring opt-out requests, then the bar for differentiation is embarrassingly low. Simply honoring the requests your customers are already making puts you ahead of nearly a third of your competitors. That alone should tell you how broken the current landscape is.
The second move is transparent communication. Tell customers what you collect, why you collect it, and what they get in return. Use plain language. Place privacy controls where people can actually find them, rather than burying them in settings menus designed to discourage use. Regularly analyzing consumer behavior data, as I do, reveals a consistent pattern: the moment a company makes privacy controls genuinely accessible, usage of those controls spikes, then stabilizes. The initial spike scares executives, but the stabilization reflects something valuable. It reflects informed consent. And informed consent is the foundation of a relationship that lasts.
The third move is restructuring incentives internally. If your marketing team is rewarded solely on metrics that require invasive tracking, your privacy policy is a fiction. Align compensation, recognition, and promotion criteria with customer trust indicators. Measure retention and lifetime value alongside acquisition cost. The brands doing this are finding that respectful data practices do not reduce performance. They shift it toward more sustainable growth curves.
The behavioral economics principle at work here is straightforward: people reciprocate trust. When a brand visibly respects boundaries, consumers lower their defenses and engage more authentically. The data you collect through earned trust is richer, more accurate, and more actionable than anything harvested through surveillance. The irony is almost too clean. Companies chasing every scrap of behavioral data end up with noisy, degraded signals. Companies that practice restraint end up with cleaner, more valuable insights.
The “do not track” button was never a threat. It was a signal. Two-thirds of consumers were telling the industry exactly what they needed. The brands that listened early are now reaping the rewards. The rest are still pretending the signal was static.
