Christine McKinnon, Head of Business Intelligence

Consumers aren't conflicted about privacy. They're navigating a digital economy that has made surrendering control the price of participation. As AI reshapes that economy, the balance of power is being challenged — and the consequences are now becoming more obvious.

Since the inception of our Data Consciousness Project (DCP), we have tracked Australians' evolving attitudes towards data, privacy and the organisations that increasingly shape their digital lives. Throughout that time, one persistent tension has been what is commonly called: the privacy paradox.

The premise is familiar. People claim to value their privacy yet continue to share personal information, engage with platforms they distrust and participate in digital ecosystems they know carry risks.

But perhaps the paradox isn't in consumer behaviour. Perhaps it's the ways it’s conveniently interpreted.

By framing this disconnect as a paradox, we make it easier for brands to dismiss, rationalise and, in some cases, exploit. The language of cognitive dissonance positions consumers as inherently contradictory: concerned about privacy but unwilling to change their behaviour. It conveniently places responsibility on the individual while perpetuating the illusion that meaningful choice exists.

The reality is less about contradiction and more about control.  At the heart of the privacy paradox lies a fundamental power imbalance. Increasingly, purchasing, participating and simply functioning in a digital society require people to surrender personal information, often with limited transparency over how it will be used, shared or retained.

Over seven years of DCP research, we have watched Australians' data consciousness evolve from concern towards resignation.

Between 2019 and 2026, the proportion of Australians who felt they were part of a vast data network they could not control increased from 66% to 71%. Today, 64% believe it is impossible to avoid sharing their data.

Meanwhile, satisfaction with this exchange continues to erode. Just 33% of Australians are happy with the amount of personal information they provide to organisations.

More than three-quarters remain concerned about their data being hacked or misused by social media companies, yet over 50% continue to engage with social media daily although that engagement is lessening as we see some retreat from these platforms, driven partly by concerns around mental health, addictive algorithms and privacy.

That distinction has been foundational to our DCP data exchange formula. Rather than treating consumers as defeated participants, we recognise that they are attempting to exercise agency within systems designed to constrain it.

For brands, this demands a different approach: moving beyond extracting consent towards designing data relationships grounded in transparency, respect, genuine value exchange and customer empowerment.

AI is accelerating the reckoning, and we are now witnessing a strikingly similar societal tension emerge around artificial intelligence. 

Our 2026 DCP research reveals that 63% of Australians have deliberately used AI, despite significant concerns about its consequences. 64% are concerned about deepfake content, 66% about unethical AI use, and 62% about threats to privacy and security.

Once again, adoption is advancing alongside anxiety, but this time is different

Unlike the gradual awakening to the implications of data collection and social media, awareness of AI's potential harms has entered mainstream consciousness extraordinarily quickly. Consumers are encountering the benefits and risks almost simultaneously.

Governments, too, are responding more rapidly. Across Australia and internationally, regulatory attention is increasingly focused on platform accountability, algorithmic harms, digital duties of care and age-based protections.

This matters because regulation offers a potential resolution to the perceived cognitive dissonance: shifting responsibility away from individuals and back towards the organisations designing and profiting from these systems. Finally, it does not seem farfetched that consumers should not have to choose between participation and protection. Increasingly, they will expect both.

The next frontier may fundamentally reshape this relationship.  As AI agents evolve from tools that respond to prompts into systems capable of researching, recommending, negotiating and purchasing on our behalf, the question of trust becomes even more consequential.

Consumers may increasingly delegate decisions to personal AI agents operating within boundaries they define. Those agents could become powerful intermediaries between brands and customers, filtering organisations according to preferences, permissions and expectations of integrity.

In this world, brand trust is no longer simply about influencing human perception. It may determine whether a brand is considered at all.  A business that exploits data, obscures its intentions or undermines consumer control risks being excluded before the purchase journey even begins.

This represents a shift from brands setting the terms of the relationship to consumers increasingly defining the conditions of engagement.

The DCP data exchange formula has always been built around this principle. Sustainable digital relationships depend on a fair exchange of value, transparency and meaningful control.  As AI transforms the architecture of consumer choice, those principles become more important, not less.

The era when technology companies could rely on consumer resignation as implicit permission is being challenged. People are becoming more sophisticated in recognising the motives, mechanisms and consequences of digital engagement.  The next competitive advantage will not simply belong to brands with the most data, the smartest algorithms or the most sophisticated AI.

It will belong to those that have earned the right to participate in consumers' increasingly protected digital lives.  In the age of AI agents, trust won't just influence preference. It could determine access.