What different ways do people handle AI privacy concerns?

Alongside its data-lifecycle breakdown of concerns, the paper's qualitative coding of r/ChatGPT discussions identifies four recurring postures users take toward security-and-privacy risk: "Some users proactively safeguard their data and adjust privacy settings, while others prioritize convenience over privacy risks, dismissing privacy concerns in favor of benefits, or feel resigned to inevitable data sharing." Elaborated further: some are "proactive in safeguarding their data, adjusting privacy settings, and limiting the information they share"; others are "inquisitive, seeking information about how their data is collected, used, and stored"; a third group "prioritize[s] convenience and the benefits these platforms offer, often downplaying or dismissing privacy risks"; and a fourth "feel resigned to data sharing as an unavoidable aspect of modern digital interactions."

The typology comes from coding how users talk, not from a survey instrument asking them to self-select a category. The paper reaches it through the same four-step pipeline used for the concern taxonomy — keyword-filtered sampling, iterative qualitative coding, and an LLM-based multi-class classifier applied across the full S&P-related subset — so the four postures are read off defensive behavior described in posts (adjusting settings), information-seeking questions, convenience-trade-off rationalizations, and fatalistic language about data sharing, rather than measured independently. The paper frames these as "varied behaviors and preferences," language that leaves open whether the four are stable traits, situational postures, or points on a spectrum.

The proactive and inquisitive postures are exactly the audience that the transparency-and-control principle in Which AI design principles for social media have research support? would serve — both groups actively seek or act on data controls, so better disclosure tooling has somewhere to land. Convenience-prioritizing and resigned users may not engage with those controls even when offered, a gap neither this excerpt nor that note tests directly. The resigned posture also reads as a plausible long-run outcome of the mechanism in Does chatbot personalization build trust or expose privacy risks?: if each interaction ratchets both trust and awareness of data collection, resignation could be what happens when a user's awareness keeps rising but their sense of control does not, though the excerpt here does not trace that path explicitly.

What the excerpt does not establish is how common each posture is — unlike the concern-category breakdown, no percentages are given for the four attitudes, so it is a qualitative typology, not a sized segmentation. It also does not show that a user's posture is stable: the paper's companion finding that aggregate concern levels shift with "major events in the AI ecosystem" says population-level concern moves over time, not that individuals migrate between proactive, inquisitive, convenience-prioritizing, and resigned postures as those events occur. Treat this as a hypothesis-generating typology for segmenting design responses to privacy friction, not a validated or sized behavioral taxonomy.