For business owners, customer data is as valuable as cash flow. Managed well, it drives targeting, personalisation, and growth. Poor data handling erodes trust, brings regulatory risks, and disrupts operations. Research shows that customers worry about the impact of data on trust and engagement. In today’s AI-driven marketing landscape, ethics and privacy are strategic advantages (i-Synergy, 2024; Yadav et al., 2024).

Why Data Privacy Has Become a Growth Issue

Consumer surveys reveal great concern over data collection and tracking. A Harvard-linked study of 2,416 Americans found that about 70% felt uneasy about companies and social media gathering their data. Studies indicate a strong negative impact of privacy concerns on trust and brand engagement (Yadav et al., 2024; i-Synergy, 2024).

For SMEs, these issues are tangible, as digital marketing success increasingly depends on responsible data practices. Studies show that privacy breaches and the misuse of personal data can harm brand reputation, reduce customer participation, and result in regulatory penalties, thereby limiting growth and innovation (Ayaz et al., 2025; Alhitmi et al., 2024).

Privacy and ethics are now directly tied to revenue, not just compliance.

The Personalisation–Privacy Paradox

Modern marketing relies on deep customer understanding, but the practices that enable hyper-personalisation can feel intrusive. Academics call this the “personalisation–privacy paradox”: customers appreciate relevant offers but are wary of surveillance.

A 2025 study on AI-enabled marketing found that consumers weigh convenience and relevance against risks such as loss of control or increased surveillance. People are more willing to share data when they: (Vishwakarma et al., 2025)

• Understand what is collected and why.
• Feel they have control and can opt out.
• Trust both the brand and the legal environment (Yadav et al., 2024; Vishwakarma et al., 2025; Gupta et al., 2025).

For smaller businesses, the key is to maintain personalisation while being transparent, offering real control, and collecting only necessary data.

AI in Marketing: New Power, New Risks

AI enhances marketing by analysing large datasets, predicting behaviour, and automating personalised interactions at scale. However, research highlights several specific ethical and privacy risks in AI-based digital marketing (Alhitmi et al., 2024; Saura et al., 2024; Office of the Victorian Information Commissioner, n.d.).

• Data over-collection and function creep: AI systems often promote a “collect everything, you might need it later” approach, leading to the collection of sensitive personal information that is not essential to their function. This increases the risk that, in the event of a breach, unnecessary or sensitive data may be exposed (Alhitmi et al., 2024).
• Opacity (“black box” decisions): It is often difficult to understand how AI systems make marketing decisions. For example, it may be unclear why specific customers see certain ads or are excluded from receiving offers. Such a lack of transparency in decision-making raises concerns about fairness and potential discrimination (Saura et al., 2024).
• Security vulnerabilities: AI marketing tools rely on large datasets, making them attractive targets for hackers. In the event of a cyberattack, sensitive customer information—such as payment details, browsing behaviour, and contact information—can be exposed (Alhitmi et al., 2024).
• Misleading or manipulative tactics: AI can create content intended to influence customers, such as misleading testimonials, synthetic images, or fake videos. Without strong monitoring, these tools may be used to deceive customers or spread false information (Alhitmi et al., 2024).

Weak safeguards and norms reduce customer trust and hinder AI investment and growth. Experts advise adopting clear AI policies about transparency and data governance (Ludwig, 2024; Alhitmi et al., 2024).

For entrepreneurs, AI should be used as an assistant, not as a workaround. Apply the same ethical standards to algorithms as you would to human marketers.

Legal and Regulatory Context (with an Australian Lens)

Globally, laws such as the EU’s GDPR and California’s CCPA set expectations for consent, access, and transparency regarding personal data. In Australia, business owners must comply with the Privacy Act 1988 and the Australian Privacy Principles (APPs), which set rules around how personal information is collected, used, stored, and disclosed (Scale Suite, 2025; Tanner, 2024; Vishwakarma et al., 2025; Yadav et al., 2024; Tannous, 2017).

For digital marketers, key APPs include: (Tanner, 2024)

• Open and transparent management (APP 1): Have a clear, accessible privacy policy that explains what you collect, why, how it is stored, and with whom it is shared.
• Consent and data minimisation: Collect only what is necessary, and obtain informed consent where required.
• Access and correction: Allow customers to see and correct their personal information.
• Security: Take reasonable steps to protect personal information from misuse, loss, and unauthorised access.

An Australian case example shows how good privacy practices can create a competitive advantage: one Melbourne e‑commerce platform invested heavily in data security and, when competitors suffered breaches, retained customer trust and even gained new business from privacy-conscious customers (Scale Suite, 2025).

Ethical Principles for Data-Driven and AI-Driven Marketing

Academic and professional sources converge on several core principles for ethical digital and AI marketing: (UNSW Sydney, 2019; i-Synergy, 2024; Vishwakarma et al., 2025; Ludwig, 2024; Yadav et al., 2024).

Transparency

Be clear about what data you collect, how you use it, and who receives it. Clear explanations and honest communication – including when mistakes occur – are repeatedly linked with higher trust and a greater willingness to share data (Sedalo, 2026; i-Synergy, 2024; Yadav et al., 2024).

Consent and Control

Move beyond buried checkboxes. Offer meaningful opt‑in and easy opt‑out, preferences centres, and clear cookie and tracking notices. Research on AI personalisation shows that dashboards that allow users to choose what is used and for what purpose increase trust and acceptance (Vishwakarma et al., 2025; Gupta et al., 2025).

Data Minimisation

Collect the smallest amount of data needed to achieve a defined purpose. Privacy and ethics literature emphasises that minimisation reduces risk and aligns with consumer expectations that brands will not hoard irrelevant information (Tanner, 2024; Vishwakarma et al., 2025).

Security and Governance

Implement strong technical and organisational safeguards, including encryption, access controls, regular audits, vendor due diligence, and incident response plans. AI systems should be part of this governance – for example, testing models for bias and monitoring who has access to training data (ITConnexion, 2024; Saura et al., 2024; Ludwig, 2024; Tanner, 2024; Alhitmi et al., 2024).

Fairness and Non-Manipulation

Avoid using data or AI to exploit vulnerabilities (e.g., targeting people in distress or using dark patterns to trap them into subscriptions). Emerging research on AI ethics argues that marketers should design systems that respect autonomy rather than nudge people deceptively (Saura et al., 2024; Alhitmi et al., 2024).

Accountability

Assign clear responsibility for data and AI decisions within your business. Studies suggest that explicit governance structures and internal policies help organisations align commercial goals with ethical and legal obligations (Ayaz et al., 2025; Ludwig, 2024; Saura et al., 2024).

Turning Privacy into a Trust and Growth Advantage

Contrary to the fear that “strong privacy will kill marketing,” evidence points in the opposite direction: privacy‑centred marketing can improve lead quality and deepen relationships (Sedalo, 2026; Yadav et al., 2024).

One practitioner‑researcher argues that when customers feel their data is secure and respected, they are more willing to provide accurate information, give feedback, and make repeat purchases – while suspected misuse leads to rapid trust erosion that is much harder and more expensive to repair. The same author notes that privacy‑focused marketing tends to “screen out” low‑fit audiences and attract more serious, engaged customers (Sedalo, 2026).

A 2024 study on data privacy finds that transparent, user-controlled, and compliant brands gain greater trust, leading to higher engagement and a greater willingness to share information. Strategically, treat privacy as a value proposition (Yadav et al., 2024).

“We will use your data to help you, not to exploit you – and we will show you how.”

Practical Steps for Business Owners and Entrepreneurs

You do not need a large legal team to act ethically. Instead, focus on clear, practical steps:

• Map your data flows: What do you collect, where is it stored, who can access it, and which tools or partners receive it? (ITConnexion, 2024; Tanner, 2024).
• Update your privacy policy and consent flows: Write in plain language, make it easy to find, and align your actual practices with what you promise (i-Synergy, 2024; Tanner, 2024; Yadav et al., 2024).
• Create simple AI and data-use guidelines: Document what data your marketing AI tools can and cannot use, how you check outputs for bias and accuracy, and when humans must review decisions (Ludwig, 2024; Saura et al., 2024; Alhitmi et al., 2024).
• Train your team: Even a brief, annual session on privacy, phishing, and ethical marketing can reduce risk and improve judgment (ITConnexion, 2024; Alhitmi et al., 2024).
• Communicate your stance: Use your website, onboarding emails, and social content to explain how you protect customer data and what rights they have (i-Synergy, 2024; Yadav et al., 2024; Sedalo, 2026).

Therefore, in your data collection review, consider not “How little can we get away with?” but “What will build the most trust with our customers over the long term?” In a digital world saturated with tracking and AI, successful businesses will combine effective data use with clear ethics, strong safeguards, and genuine respect for their customers.

In summary, which aspect of your current marketing—data collection, AI tools, or customer communication—feels most misaligned with the level of trust you aim to build?

REFERENCES

A-O

Alhitmi, H. K., Mardiah, A., Al-Sulaiti, K. I., & Abbas, J. (2024). Data security and privacy concerns of AI-driven marketing in the context of economics and the business field: An exploration into possible solutions. Cogent Business & Management, 11(1). https://doi.org/10.1080/23311975.2024.2393743

Ayaz, O., Tabaghdehi, A., Tambay, P., & Rosli, A. (2025). Ethical implications of employee and customer digital footprint: SMEs perspective. Journal of Business Research, 188. https://doi.org/10.1016/j.jbusres.2024.115088

Gupta, S., Sharma, L., & Mathew, R. (2025). Balancing Personalisation and Privacy in AI-Enabled Marketing Consumer Trust, Regulatory Impact, and Strategic Implications – A Qualitative Study using NVivo. Advances in Consumer Research, 2(5), 46–57. https://acr-journal.com/article/balancing-personalization-and-privacy-in-ai-enabled-marketing-consumer-trust-regulatory-impact-and-strategic-implications-a-qualitative-study-using-nvivo-1633/

ITConnexion. (2024, February 15). Data Privacy and Ethics in Today’s Tech Landscape [Digital]. https://www.itconnexion.com/data-privacy-and-ethics/

i-Synergy. (2024, February 7). The Importance of Data Privacy and Ethics in Digital Marketing [Digital Marketing]. https://isynergy.io/the-importance-of-data-privacy-and-ethics-in-digital-marketing/

Ludwig, T. (2024, January 4). Where AI and Marketing Intersect in 2024 [Marketing]. https://www.acquia.com/blog/marketing-tech-trends

Office of the Victorian Information Commissioner. (n.d.). Artificial Intelligence and Privacy – Issues and Challenges [Government]. Victorian Government. Office of the Victorian Information Commissioner. https://ovic.vic.gov.au/privacy/resources-for-organisations/artificial-intelligence-and-privacy-issues-and-challenges/

S-Y

Saura, J. R., Škare, V., & Dosen, D. O. (2024). Is AI-based digital marketing ethical? Assessing a new data privacy paradox. Journal of Innovation & Knowledge, 9(4). https://doi.org/10.1016/j.jik.2024.100597

Scale Suite. (2025, May). Business Ethics for Australian Small and Medium Businesses [Finance & HR]. Scale Suite. https://www.scalesuite.com.au/resources/business-ethics-the-complete-guide

Sedalo, G. (2026, February 12). Data Privacy in Digital Marketing: What Every SME Must Know [Academic]. Dr Sedalo. https://drgenevievesedalo.com/blog/data-privacy-in-digital-marketing-what-every-sme-must-know

Tanner, K. (2024, June 17). Data Privacy in Australia: Guide for Digital Marketers [Marketing]. In Marketing We Trust. https://inmarketingwetrust.com.au/data-privacy-in-australia-guide-for-digital-marketers/

Tannous, B. (2017). The ATMS Code of Conduct. Journal of the Australian – Traditional Medicine Society, 23(2), 98–99.

UNSW Sydney. (2019, July 5). Ethical Marketing: Maintaining trust in an age of digital personalisation [University]. UNSW Sydney. https://www.unsw.edu.au/news/2019/07/ethical-marketing–maintaining-trust-in-an-age-of-digital-person

Vishwakarma, R. K., Pandey, A., Kundnani, P., Yadav, A. K., Singh, N., & Yadav, S. (2025). Personalisation vs. Privacy: Marketing Strategies in the Digital Age. Journal of Marketing & Social Research, 2(5), 177–191. https://doi.org/10.61336/jmsr/25-05-20

Yadav, C., Kala, K., Kolachina, R. I. R., Kanneganti, M. C., & Pasupuleti, S. S. (2024). Data Privacy Concerns and Their Impact on Consumer Trust in Digital Marketing. International Journal of Scientific Research in Engineering and Management, 8(11). https://doi.org/10.55041/IJSREM38555