Marketing Laws, Ethics & Compliance

Chapter 11
Marketing Research, Analytics and Ethical Decision-Making

Graduate Program in Marketing Management
Marketing Laws, Ethics & Compliance   •   Graduate

Marketing Research, Analytics and Ethical Decision-Making

Introduction

Marketing research and analytics increasingly determine whom organizations address, what they offer, how they allocate budgets, and which customers receive different prices, messages, or opportunities. These capabilities create substantial value: better product-market fit, more relevant communication, faster experimentation, and improved accountability for marketing investment. They also create legal and ethical exposure. A survey may collect sensitive information without meaningful consent; a sample may systematically exclude vulnerable groups; an experiment may disadvantage a control group; a behavioral model may infer health, financial, or political characteristics; and an attribution algorithm may reward channels that merely capture demand rather than create it.

Ethical marketing analytics therefore cannot be reduced to compliance checklists. Compliance establishes minimum obligations, while ethical decision-making asks whether a practice is fair, proportionate, transparent, contestable, and responsible in context. This chapter develops a framework for evaluating consent, sampling, experimentation, behavioral targeting, attribution, algorithmic segmentation, bias, re-identification, and stakeholder impacts.

The discussion is jurisdiction-neutral but reflects widely recognized principles found in data-protection and consumer-protection regimes, including lawfulness, purpose limitation, data minimization, transparency, security, accountability, and rights of access, correction, objection, and deletion. Exact legal requirements vary by jurisdiction, sector, data category, and organizational role. Managers must therefore obtain current legal advice before deployment.

Learning Objectives

By the end of this chapter, readers should be able to:

  1. Distinguish ethical, legal, and methodological dimensions of marketing research.
  2. Evaluate consent, sampling, and experimentation designs.
  3. Explain risks in behavioral targeting, attribution, and algorithmic segmentation.
  4. Identify selection bias, measurement bias, disparate impact, and re-identification risk.
  5. Apply ethical impact, stakeholder, and risk–benefit frameworks to marketing decisions.
  6. Design governance controls for responsible analytics and AI-enabled marketing.

1. Marketing Analytics as a Socio-Technical System

A marketing dataset is not a neutral mirror of reality. It is produced by choices about who is observed, which variables are defined, what is measured, how missing values are treated, and which outcomes count as success. A customer relationship management system may contain detailed information about existing customers but little information about noncustomers. Clickstream data measure digital activity more easily than offline experience. Purchase data record transactions but not unmet demand. Consequently, analytical outputs inherit the limitations of collection processes.

A useful distinction is between four layers:

LayerCentral questionTypical ethical risk
CollectionWhat information is obtained, from whom, and by what means?Invalid consent, excessive collection, surveillance
InferenceWhat characteristics or predictions are derived?Sensitive inference, inaccurate profiling
DecisionWhat action follows from the analysis?Discrimination, manipulation, exclusion
ImpactWho benefits, bears costs, or can challenge the result?Unequal burdens, loss of autonomy, weak remedy

Ethical review must examine the complete chain rather than only the model. A technically accurate prediction can still support an unjust decision. Conversely, a modestly predictive model may be acceptable when its purpose is low risk, its data are proportionate, and affected people have meaningful control.

Important terminology includes personal data, information relating to an identified or identifiable person; sensitive data, information receiving enhanced legal or ethical protection; profiling, automated processing used to evaluate or predict personal characteristics; and pseudonymization, replacing direct identifiers with codes while retaining a possibility of linkage. Pseudonymized data are not necessarily anonymous. Anonymization aims to make re-identification reasonably infeasible, although anonymity is a matter of residual risk rather than a label that can be asserted permanently.

2. Consent and the Research Relationship

Consent is ethically meaningful when it is informed, specific, freely given, and capable of being withdrawn without unreasonable penalty. A pre-ticked box, a vague statement such as “we may use your information to improve services,” or consent bundled into an unavoidable transaction may fail these conditions. Consent is also not the only possible legal basis for processing in every jurisdiction, but relying on another basis does not eliminate duties of fairness, transparency, minimization, and security.

2.1 Elements of meaningful consent

A sound consent process should explain:

  • the identity of the organization and relevant partners;
  • the precise or reasonably bounded purpose;
  • categories of data collected and whether sensitive data are involved;
  • whether automated profiling or personalization occurs;
  • retention period or retention criteria;
  • possible disclosures and international transfers;
  • foreseeable risks and benefits; and
  • how to refuse or withdraw consent.

Consent should be granular. A participant might agree to a product survey but decline use of responses for advertising; agree to email research invitations but decline location tracking; or agree to a one-time experiment without agreeing to indefinite behavioral profiling. The organization should record what was presented, what option was selected, when consent was obtained, and whether the consent version later changed.

Power relationships complicate voluntariness. Employees, students, patients, children, financially dependent customers, and platform users facing a take-it-or-leave-it interface may not be free to refuse. Incentives can improve participation, but disproportionate incentives may induce participation by people who cannot reasonably absorb the risk. For children and other protected groups, age assurance, guardian processes, simplified explanations, and heightened minimization may be necessary.

2.2 Consent versus notice

Notice informs; consent authorizes where consent is the relevant basis. Reading a privacy notice is not equivalent to understanding it, and acceptance of general terms is not automatically informed agreement to a high-impact research activity. Ethical practice uses layered communication: a concise explanation at the point of collection, with links to fuller documentation and contact channels.

Researchers should also distinguish research from marketing. A customer who agrees to a satisfaction study may reasonably expect analysis of service quality, not later use of their responses to target them with unrelated offers. Secondary use should be compatible with the original context or supported by a new, appropriate basis and communication.

3. Sampling, Measurement, and Representation

Sampling is both a scientific and ethical issue. A sample can be statistically large yet socially unrepresentative. Online panels may underrepresent people with limited connectivity; loyalty-program data exclude nonmembers; app-based studies exclude people without compatible devices; and language restrictions can marginalize minority communities.

3.1 Sampling error and selection bias

For a simple random sample estimating a population proportion p, the standard error of the sample proportion p̂ is:

SE(p̂) = √[p̂(1 − p̂) / n]

Here, n is the number of independently sampled observations, and p̂ lies between 0 and 1. This formula assumes a probability sample, independent observations, and a sufficiently large sample for the approximation to be useful. It describes random sampling variability, not coverage error, nonresponse bias, or measurement bias. A very large convenience sample may have a small apparent standard error while remaining systematically wrong for the target population.

For a 95% approximate confidence interval for a proportion, a common large-sample expression is:

p̂ ± 1.96 × SE(p̂)

The multiplier 1.96 is based on a normal approximation. It is not reliable for every sample size or extreme proportion; alternative intervals, such as Wilson intervals, may be preferable. The interval also assumes the sampling design and measurement process justify the calculation.

Coverage bias occurs when the sampling frame omits part of the target population. Nonresponse bias occurs when respondents differ systematically from nonrespondents. Measurement bias occurs when the instrument produces systematically distorted responses. Construct validity asks whether the measure actually represents the concept of interest. For example, clicks may be a poor proxy for attention, and stated purchase intention may be a poor proxy for future purchase.

3.2 Ethical sampling practice

Before fieldwork, researchers should specify the target population, inclusion and exclusion criteria, sampling frame, recruitment channels, compensation, and anticipated exclusions. They should assess whether exclusion is necessary for safety or research validity, or merely convenient. Where groups are underrepresented, stratification, oversampling, translated instruments, accessibility accommodations, and weighting may improve fairness. Oversampling does not by itself create bias; failing to disclose it or ignoring design weights in analysis does.

Weighting can adjust estimates when selection probabilities and relevant population benchmarks are known. If each observation i has selection probability πᵢ, a basic design weight is:

wᵢ = 1 / πᵢ

The weight is dimensionless and expresses how many population units the observation represents. This approach assumes the sampling probabilities are correctly specified and that post-collection adjustment variables adequately address relevant differences. Weighting can increase variance and cannot repair unmeasured selection mechanisms or invalid responses.

Researchers should report who was not reached, response rates where meaningful, missing-data patterns, weighting procedures, subgroup performance, and limitations. Suppressing inconvenient subgroup results is an ethical failure because it conceals uncertainty and can cause decisions to be made on misleading evidence.

4. Experimentation and Causal Responsibility

Marketing experiments compare outcomes under different interventions. Random assignment helps make treatment groups comparable in expectation, allowing a difference in average outcomes to estimate a causal effect under appropriate assumptions. The average treatment effect can be written as:

ATE = E[Y(1) − Y(0)]

Y(1) is the potential outcome if a unit receives treatment, Y(0) is the potential outcome under control, and E denotes the population or study average. Randomization, adequate implementation, limited interference between units, and well-defined treatment and outcome are central assumptions. The expression does not prove causality when assignment is not genuinely random or when treatment differs across groups in uncontrolled ways.

A simple experimental estimator is:

ATÊ = Ȳ₁ − Ȳ₀

where Ȳ₁ and Ȳ₀ are the observed mean outcomes for treatment and control groups. If the outcome is revenue, both means must use the same currency, time window, and unit of analysis. Statistical significance does not establish practical significance, fairness, or acceptability.

4.1 Ethical design questions

Before launching an experiment, teams should ask:

  1. Is the intervention necessary to answer a legitimate question?
  2. Is the expected benefit proportionate to participant burden and risk?
  3. Is there a less intrusive design?
  4. Are vulnerable groups exposed to greater risk or denied a meaningful benefit?
  5. Is the control condition acceptable, and is there an escalation rule for harm?
  6. Are outcomes measured beyond immediate conversion, including complaints, exclusion, debt, well-being, and unequal effects?
  7. Can participants opt out where feasible, and can adverse effects be reversed?

A/B testing can become ethically problematic when it manipulates essential services, uses dark patterns, exploits emotional vulnerability, or withholds a known beneficial feature. A low-risk interface experiment is not automatically harmless: repeated exposure can accumulate burden, and small disadvantages can scale to millions of people.

Stopping rules should be specified in advance. Teams should monitor safety metrics, not only revenue metrics, and retain an audit record of hypotheses, assignment logic, exclusions, interim analyses, and decisions. Post hoc subgroup discovery can be useful for generating hypotheses, but it should not be presented as confirmatory evidence without appropriate validation.

5. Behavioral Targeting and Algorithmic Segmentation

Behavioral targeting uses observed or inferred behavior—such as browsing, location, purchase history, device signals, or engagement—to tailor content or offers. Algorithmic segmentation groups people according to similarities relevant to a marketing objective. Segmentation may be descriptive, predictive, or prescriptive. The ethical risk increases when segmentation moves from understanding patterns to determining access, price, visibility, or opportunity.

A model can use seemingly ordinary variables as proxies for protected or sensitive characteristics. Postal code may correlate with ethnicity or income; device type may correlate with socioeconomic status; browsing patterns may suggest health conditions; and time-of-day behavior may correlate with work or caregiving constraints. Excluding an explicitly protected attribute does not guarantee fairness.

5.1 Context and proportionality

The same data use can have different ethical meanings in different contexts. Personalized recommendations for entertainment are generally lower risk than inferring addiction risk to promote high-cost credit. A discount offered to price-sensitive customers may be beneficial, while a higher price inferred from constrained choice may be exploitative. Managers should evaluate purpose, sensitivity, scale, reversibility, power asymmetry, and potential for exclusion.

A responsible targeting policy should define prohibited or restricted categories, such as targeting based on inferred medical conditions, precise location around sensitive facilities, financial distress, or protected characteristics, unless a compelling and lawful justification exists. It should also limit frequency, provide meaningful controls, and avoid making personalization so opaque that people cannot understand or contest material outcomes.

5.2 Fairness and bias

Bias may arise from historical inequity, unrepresentative data, labels that encode past decisions, proxy variables, measurement error, or deployment context. Common diagnostic comparisons include selection-rate ratios and error-rate differences. If group g receives a positive decision at rate r_g, a selection-rate ratio comparing groups a and b is:

SRR = rₐ / rᵦ

The ratio is dimensionless. It is a descriptive diagnostic, not a universal legal test or a complete definition of fairness. Fairness criteria can conflict: equal selection rates, equal false-positive rates, calibration, and individual fairness may not all be simultaneously achievable when groups have different base rates. Therefore, organizations must choose criteria based on the decision context, law, harms, and stakeholder justification rather than selecting a metric after seeing the result.

Fairness assessment should examine both model outputs and business processes. If one group is less likely to be shown an offer, the organization should ask whether the offer itself is beneficial, whether the group was measured accurately, and whether the business objective rewards exclusion. Aggregate fairness can conceal intersectional harms affecting, for example, older women in rural areas. Testing should therefore include relevant intersections where sample sizes and privacy safeguards permit.

6. Attribution and the Meaning of Marketing Contribution

Attribution assigns credit for an outcome to marketing touchpoints. Last-touch attribution gives all credit to the final interaction; first-touch attribution credits discovery; linear attribution divides credit equally; and algorithmic approaches estimate incremental contribution using experiments or statistical models. Each answers a different question.

A central distinction is between correlation and incrementality. A channel may appear associated with conversions because it reaches people who were already likely to buy. Retargeting often illustrates this problem: ads shown near purchase may receive credit even though they caused little additional demand.

The strongest evidence for incrementality usually comes from randomized holdout tests, geo experiments, or carefully designed quasi-experiments. Observational models can be useful but require assumptions about confounding, timing, measurement, and spillovers. Managers should not treat a precise attribution number as objective truth when the underlying counterfactual—what would have happened without the channel—is unobserved.

Ethically, attribution affects budgets, employment, agency compensation, and the visibility of channels serving less measurable audiences. Over-crediting trackable digital interactions can divert resources from brand building, community media, offline service, or accessibility initiatives. Attribution systems should therefore report uncertainty, compare model-based results with experimental evidence, and include longer-term outcomes such as retention, trust, complaints, and customer equity.

7. Re-identification and Data Security

Re-identification occurs when records believed to be anonymous are linked with other information to identify individuals. Direct identifiers such as names and email addresses are obvious risks, but combinations of quasi-identifiers—location, date, age, device, and transaction pattern—may be distinctive. Removing names is therefore not sufficient.

A practical risk assessment asks:

  • What external datasets are available?
  • How unique are combinations of attributes?
  • Who can access raw and derived data?
  • Could a model output reveal membership in a sensitive group?
  • What happens if data are breached or repurposed?
  • Can individuals reasonably anticipate the linkage?

Technical controls include aggregation, generalization, suppression of rare categories, access controls, encryption, retention limits, separation of identifiers, secure computation, and privacy-preserving release methods. Differential privacy is one formal approach that limits how much an output changes when one person’s record is added or removed. In simplified form, a randomized mechanism M is ε-differentially private when, for neighboring datasets D and D′ differing in one person, and for every possible output set S:

Pr[M(D) ∈ S] ≤ e^ε × Pr[M(D′) ∈ S]

ε is a nonnegative privacy-loss parameter; smaller ε generally provides stronger privacy but may reduce analytical utility. The definition assumes a clearly specified neighboring-dataset relation and a mechanism designed to satisfy the guarantee. Privacy budgets can accumulate across repeated releases, so publishing many “private” statistics can still create substantial risk. Differential privacy does not solve unfair purpose selection, poor consent, or harmful downstream decisions.

8. Ethical Decision-Making Frameworks

8.1 The ethical impact assessment

An ethical impact assessment should be completed before collection, modeling, experimentation, or deployment and revisited after material changes. Its core questions are:

  1. Purpose: What decision is the system intended to support, and is the purpose legitimate?
  2. Necessity: Are the data and level of intrusiveness necessary?
  3. Affected parties: Who is observed, inferred about, targeted, excluded, or burdened?
  4. Rights and expectations: What consent, notice, objection, access, or explanation is appropriate?
  5. Fairness: Are errors and benefits distributed unequally?
  6. Security and privacy: What could disclosure or linkage reveal?
  7. Remedy: Can people challenge, correct, opt out, or obtain compensation?
  8. Accountability: Who owns the decision, monitors it, and stops it?

8.2 Stakeholder analysis

Stakeholder analysis identifies customers, prospects, noncustomers, employees, researchers, data subjects, suppliers, platforms, regulators, communities, shareholders, and people indirectly affected. For each stakeholder, document interests, power, vulnerability, likely benefits, likely burdens, and available voice. A firm should not treat the paying client as the only stakeholder when a model affects people who never consented to the commercial relationship.

8.3 Risk–benefit analysis

Risk–benefit analysis compares expected value with foreseeable harms, but it must not convert fundamental rights into a simple monetary trade. Consider severity, likelihood, duration, reversibility, scale, distribution, and uncertainty. High-impact risks affecting vulnerable groups may be unacceptable even when aggregate commercial benefits are large. Mitigation should be specific: reduce data fields, limit retention, restrict targeting, add human review, conduct a holdout test, or stop deployment.

A useful governance decision is not merely “approve” or “reject.” Options include approve, approve with safeguards, pilot under monitoring, redesign, defer pending evidence, or prohibit. The decision record should explain evidence, dissenting views, residual risk, responsible owners, and review dates.

9. Governance Across the Analytics Lifecycle

Responsible analytics requires organizational controls rather than isolated ethical reflection. A lifecycle model includes:

  1. Problem definition: articulate the decision, affected groups, and prohibited uses.
  2. Data design: document provenance, consent, quality, representativeness, and retention.
  3. Method selection: justify sampling, measurement, experiment, model, and evaluation metrics.
  4. Pre-deployment review: conduct privacy, security, legal, fairness, and ethical impact assessments.
  5. Controlled deployment: use pilots, access restrictions, audit logs, and rollback mechanisms.
  6. Monitoring: track drift, subgroup outcomes, complaints, opt-outs, incidents, and unintended effects.
  7. Review and retirement: reassess necessity and delete or archive data appropriately.

A model card or analytic decision record should state intended use, prohibited use, training-data limitations, performance by relevant groups, uncertainty, known failure modes, and escalation contacts. Independent review is valuable where the organization has a financial incentive to approve a risky practice. Procurement contracts should address data ownership, downstream use, security, breach notification, audit rights, model changes, and deletion.

Human oversight is meaningful only when reviewers have authority, time, information, and competence to override a system. A nominal “human in the loop” who routinely accepts automated recommendations is not an effective safeguard. Appeals should be understandable and timely, particularly when a decision affects access, price, or reputation.

10. Illustrative Case: The FairReach Retention Model

This is a fictional illustrative case.

Background

FairReach, a subscription retailer, developed a model to identify customers likely to cancel within 30 days. The model used purchase history, support contacts, browsing activity, device type, payment events, and neighborhood-level variables. Marketing proposed sending predicted high-risk customers a retention discount and withholding discounts from customers predicted to remain loyal.

Problem

A preliminary audit found that customers in lower-income neighborhoods received fewer retention offers, despite having higher actual cancellation rates. The model had good overall accuracy, but support complaints suggested that some customers experienced payment difficulties that were not adequately represented. The neighborhood variable also acted as a proxy for race and income. In addition, the privacy notice described personalization generally but did not clearly explain predictive churn scoring or differential offers.

Analysis

The team separated prediction from decision. Predicting cancellation may support service improvement; using the prediction to allocate discounts creates distributive consequences. It examined false-negative and false-positive rates by subgroup, missing payment data, customer service transcripts, and the possibility that discounts would be withheld from people who needed them most. It also recognized a counterfactual problem: the model did not show whether an offer would actually prevent cancellation.

Stakeholder analysis identified customers, customer-service employees, marketing managers, shareholders, and communities affected by differential pricing. The risk–benefit review concluded that increased retention was a legitimate benefit, but opaque exclusion and proxy discrimination posed substantial risks.

Approach and solution

FairReach removed neighborhood-level variables from the first deployment, though it did not assume that this eliminated proxy risk. It established a policy that retention offers could not be used to disadvantage customers seeking essential support. The team ran a randomized, time-limited offer experiment with a holdout group, measuring retention, net revenue, complaints, affordability indicators, and subgroup outcomes. Customers received clearer notice and a preference control for personalized marketing. A service team reviewed hardship-related cases, and the model was monitored monthly for drift and unequal error rates.

The company also changed the objective from “maximize retained revenue” to “improve sustainable retention without increasing customer harm.” This led to non-price interventions—service repair, flexible payment dates, and cancellation assistance—being tested alongside discounts.

Outcome

The experiment showed that discounts increased short-term retention but were less effective than service remediation for customers with repeated support failures. The revised program reduced unnecessary discounts, improved complaint resolution, and narrowed subgroup differences in offer rates. FairReach retained the model only for prioritizing outreach and service recovery, not for denying support or assigning punitive prices.

Learning points

The case illustrates five principles. First, predictive accuracy does not establish ethical acceptability. Second, removing a protected variable does not remove proxy discrimination. Third, incrementality matters: targeting likely churners is not the same as causing retention. Fourth, noncommercial remedies may outperform incentives when the underlying problem is service failure. Fifth, governance improved the business decision by clarifying objectives and measuring longer-term effects.

11. Contemporary Developments and Professional Practice

Generative AI and automated decision systems intensify familiar problems. Synthetic data may reduce direct exposure to personal records but can reproduce or amplify patterns in the source data. Large language models may infer sensitive traits, generate persuasive content at scale, or produce explanations that sound plausible but are not faithful to the actual decision process. Data clean rooms and privacy-enhancing technologies can reduce data sharing, but they require careful configuration and do not make purpose, fairness, or consent questions disappear.

Real-time bidding and cross-context tracking raise particular concerns because data may pass through complex chains of vendors that individuals cannot reasonably understand. Marketers should map data flows, minimize partner access, prohibit secondary use, and verify deletion and opt-out signals. Regulatory developments increasingly emphasize automated-decision transparency, children’s protection, sensitive-data restrictions, platform accountability, and demonstrable governance. Because rules evolve, organizations should maintain a legal horizon-scanning process rather than relying on static policies.

Best practice is summarized below:

Decision areaMinimum responsible practice
ConsentSpecific, understandable, recorded, withdrawable, and not coercive
SamplingDefine the population, disclose exclusions, test representation and nonresponse
ExperimentsPredefine outcomes, monitor harms, use acceptable controls, preserve rollback
TargetingRestrict sensitive inferences, limit frequency, provide control and explanation
AttributionDistinguish correlation from incrementality and report uncertainty
SegmentationTest subgroup and intersectional performance; assess proxies
Re-identificationMinimize, pseudonymize, secure, aggregate, and assess linkage risk
GovernanceAssign accountable owners, document decisions, audit, monitor, and provide remedy

Chapter Summary

Marketing research and analytics are socio-technical systems in which collection, inference, decision, and impact are inseparable. Meaningful consent requires informed, specific, voluntary, and revisable participation; notice alone is not always consent. Sampling quality depends not only on sample size but also on coverage, nonresponse, measurement validity, and transparent reporting. Experiments can estimate causal effects when their assumptions and implementation are sound, but ethical design must also consider control conditions, vulnerable groups, burden, and adverse outcomes.

Behavioral targeting and algorithmic segmentation create risks when ordinary variables act as proxies for sensitive characteristics or when predictions determine access, price, or opportunity. Attribution should focus on incremental contribution rather than merely observed association. Re-identification risk persists when direct identifiers are removed, and privacy-enhancing techniques cannot substitute for legitimate purpose and fair use. Ethical impact assessment, stakeholder analysis, and risk–benefit reasoning provide complementary decision tools. Effective governance spans the entire lifecycle through documentation, independent review, monitoring, human authority, appeal, and retirement.

Key Terms

Consent: A voluntary, informed, specific, and appropriately recorded agreement to a data use.

Purpose limitation: Restricting data use to specified, legitimate, and compatible purposes.

Sampling frame: The operational list or process from which a sample is selected.

Coverage bias: Distortion caused by omitting part of the target population from the sampling frame.

Nonresponse bias: Distortion arising when respondents differ systematically from nonrespondents.

Measurement bias: Systematic error in how a concept is observed or recorded.

Construct validity: The extent to which a measure represents the intended concept.

Randomization: Allocation by chance to support comparability between treatment groups.

Average treatment effect: The average difference between potential outcomes under treatment and control.

Incrementality: The additional outcome caused by a marketing intervention.

Behavioral targeting: Tailoring communication or offers using observed or inferred behavior.

Algorithmic segmentation: Grouping individuals or accounts through computational rules or models.

Proxy variable: A variable that indirectly represents a protected or sensitive characteristic.

Disparate impact: Unequal adverse effects of a practice across groups, whether or not intentional.

Pseudonymization: Replacing identifiers with codes while retaining possible linkage.

Re-identification: Linking supposedly anonymous data to an identifiable person.

Differential privacy: A formal privacy guarantee limiting the effect of one person’s data on an output.

Ethical impact assessment: A structured evaluation of purpose, affected parties, rights, harms, and safeguards.

Model drift: Change over time in data patterns, relationships, or model performance.

Accountability: Assignment of responsibility for decisions, controls, monitoring, and remedy.

Review Questions

Short Answer Questions

  1. Why can a large convenience sample still produce biased marketing conclusions?
  2. Distinguish informed consent from general privacy notice.
  3. What is the difference between correlation and incrementality in attribution?
  4. Why does removing a protected variable not necessarily eliminate discrimination?
  5. Identify two controls that reduce re-identification risk.

Long Answer Questions

  1. Explain how consent, purpose limitation, and data minimization should shape a behavioral-targeting program.
  2. Compare last-touch attribution with randomized incrementality testing, including their managerial limitations.
  3. Discuss the ethical and methodological challenges of using algorithmic segmentation for differential offers.
  4. Explain how sampling, measurement, and nonresponse errors can interact in a marketing study.
  5. Design an analytics governance lifecycle for a company deploying AI-based personalization.

Analytical / Application Questions

  1. A retailer’s retention model has high overall accuracy but gives fewer offers to a protected subgroup with higher cancellation rates. Diagnose possible causes and propose a fair evaluation and redesign.
  2. Design a low-risk experiment to test personalized email recommendations. Specify consent or notice, treatment and control, outcome measures, subgroup monitoring, and stopping criteria.
  3. A data broker offers pseudonymized browsing data for customer acquisition. Apply stakeholder, ethical impact, and risk–benefit frameworks to decide whether and under what safeguards the purchase should proceed.

Multiple Choice Questions with Answers

Question 1

Which statement best describes a limitation of the standard error formula for a sample proportion?

A. It measures only systematic nonresponse bias.

B. It assumes conditions such as a probability sample and does not repair coverage bias.

C. It is valid only when the population proportion is exactly 0.50.

D. It eliminates measurement error when the sample is large.

Correct Answer: B. It assumes conditions such as a probability sample and does not repair coverage bias.

Question 2

What is the central ethical concern when a postal code is used in a targeting model?

A. Postal codes always contain direct identifiers.

B. Postal codes cannot be used in any statistical model.

C. Postal codes may act as proxies for protected or sensitive characteristics.

D. Postal codes necessarily produce random assignment.

Correct Answer: C. Postal codes may act as proxies for protected or sensitive characteristics.

Question 3

In a randomized marketing experiment, the estimator ATÊ = Ȳ₁ − Ȳ₀ compares what?

A. The treatment-group mean outcome with the control-group mean outcome.

B. The number of treatment observations with the number of control observations.

C. The highest individual outcome with the lowest individual outcome.

D. The predicted outcome with the sampling-frame size.

Correct Answer: A. The treatment-group mean outcome with the control-group mean outcome.

Question 4

Why may last-touch attribution overstate the value of retargeting?

A. It assigns credit only to offline media.

B. It ignores every interaction after the first touchpoint.

C. It may credit an interaction that occurred shortly before purchase without establishing that it caused the purchase.

D. It requires randomized assignment by definition.

Correct Answer: C. It may credit an interaction that occurred shortly before purchase without establishing that it caused the purchase.

Question 5

Which practice most directly supports meaningful consent?

A. A pre-ticked box bundled with unavoidable service terms.

B. A vague statement allowing all future commercial uses.

C. A clear, specific choice that can be withdrawn without unreasonable penalty.

D. A notice provided only after the data have been shared.

Correct Answer: C. A clear, specific choice that can be withdrawn without unreasonable penalty.

Question 6

What does pseudonymization mean?

A. Permanent destruction of all links to an individual.

B. Replacement of direct identifiers with codes while possible linkage remains.

C. Publication of all records in aggregated form.

D. Encryption that makes ethical review unnecessary.

Correct Answer: B. Replacement of direct identifiers with codes while possible linkage remains.

Question 7

A selection-rate ratio is best understood as what?

A. A complete legal definition of fairness in every context.

B. A descriptive comparison of positive-decision rates between groups.

C. A measure of sample size in an experiment.

D. A guarantee that model predictions are causal.

Correct Answer: B. A descriptive comparison of positive-decision rates between groups.

Question 8

Which is the strongest example of an ethical experiment safeguard?

A. Measuring only short-term conversion and ignoring complaints.

B. Changing the hypothesis after seeing favorable results.

C. Predefining outcomes and monitoring adverse effects with a rollback rule.

D. Using a control group that receives a known harmful condition.

Correct Answer: C. Predefining outcomes and monitoring adverse effects with a rollback rule.

Question 9

Under the simplified differential-privacy definition, what does ε represent?

A. The number of records in the dataset.

B. A privacy-loss parameter, with smaller values generally indicating stronger privacy.

C. The probability that every record is anonymous.

D. The model’s classification accuracy.

Correct Answer: B. A privacy-loss parameter, with smaller values generally indicating stronger privacy.

Question 10

Which conclusion follows from the FairReach case?

A. Predictive accuracy alone establishes ethical acceptability.

B. Removing neighborhood data guarantees that proxy discrimination is impossible.

C. Service remediation and incrementality testing can produce a more responsible retention strategy.

D. Discounts should always be withheld from customers predicted to remain loyal.

Correct Answer: C. Service remediation and incrementality testing can produce a more responsible retention strategy.

Marketing Laws, Ethics & Compliance
Chapter 11 of 14