![56% Click Agree Without Reading Privacy Policies [2026]](/_astro/what-percentage-of-people-read-privacy-policies.CHu84ZWE_ZmXObv.webp)
Just 9% of Americans say they always read a company's privacy policy before agreeing to it, and a newer Pew Research Center survey found that 56% frequently click agree without reading the policy's content at all, as of 2023. The two figures come from different survey questions asked four years apart, but they point the same direction: reading a privacy policy before accepting it is the exception, not the rule. Below is the full reading-frequency breakdown, what happens among the minority who do read, and what reading every policy you encounter would actually cost in time and money.
What percentage of people read privacy policies before agreeing to them?
Pew Research Center's June 2019 survey of 4,272 U.S. adults asked directly how often people read a company's privacy policy before agreeing to its terms. Only 9% said they always do, and another 13% said they often do, for a combined 22% who read policies at least often. The rest split between 38% who sometimes read a policy and 36% who say they never do.
| Reading frequency | Share of U.S. adults |
|---|---|
| Sometimes read | 38% |
| Never read | 36% |
| Often read | 13% |
| Always read | 9% |
Figure 1: Reading frequency reported by U.S. adults before agreeing to a privacy policy. Source: Pew Research Center, "Americans and Privacy" (November 2019), survey of 4,272 U.S. adults conducted June 3 to 17, 2019.
A newer Pew survey, conducted in May 2023 among 5,101 U.S. adults, asked the question differently and found that 56% say they frequently click agree on a privacy policy without reading its content. That is not a direct year-over-year comparison since the two surveys used different question wording, but both land in the same place: a large majority of Americans agree to privacy policies they have not read. Pew also found that Americans are asked to agree to a privacy policy often, with about eight in ten saying it happens at least monthly and one in four saying it happens almost every day, which makes the reading decision a recurring one rather than a rare event.
How many people read a privacy policy all the way through?
Reading a privacy policy at all is only part of the question. Among the minority of Americans who do read privacy policies, just 22% say they read them all the way through before agreeing to the terms, per Pew Research Center's 2019 survey. The rest skim, skip to a section, or stop partway.
Pew's 2023 survey helps explain why. When asked to describe privacy policies, 73% of U.S. adults said they have little to no control over what companies do with their data regardless of what the policy says, 69% called privacy policies just something to get past rather than a meaningful disclosure, 67% said they understand little or nothing about what companies actually do with their data, 61% said privacy policies are ineffective at explaining company data practices, and 56% said they frequently click agree without reading the content.
Figure 2: Share of U.S. adults agreeing with each statement about privacy policies. Source: Pew Research Center, "How Americans View Data Privacy" (October 2023), survey of 5,101 U.S. adults conducted May 15 to 21, 2023.
Those five numbers describe a feedback loop. If most people believe reading will not change the outcome, and 61% already think the policy will not explain the practices clearly, the ones who do open a policy have little reason to finish it once they hit a dense paragraph.
How long would it take to read every privacy policy you encounter?
Carnegie Mellon University researchers Aleecia McDonald and Lorrie Faith Cranor put a number on that dense paragraph in their 2008 study, "The Cost of Reading Privacy Policies." Using a sample of the 75 most popular websites, they found the average privacy policy runs about 2,500 words and takes roughly 10 minutes to read at a standard 250 words per minute reading rate, a figure they confirmed with a separate online study of 212 participants who timed themselves skimming real policies.
Multiplying that per-policy reading time by the number of unique websites the average American visits in a year, at least 119 according to Nielsen/NetRatings data the researchers used, produces a national estimate for how much time full compliance with "read before you agree" would actually cost.
| Scenario | Hours per year (per person) | Individual cost per year | National cost per year |
|---|---|---|---|
| Upper bound | 304 | $5,038 | $1.1 trillion |
| Point estimate | 244 | $3,534 | $781 billion |
| Lower bound | 181 | $2,533 | $559.7 billion |
Figure 3: Range of estimated annual reading time for privacy policies encountered by the average American. Source: McDonald and Cranor, "The Cost of Reading Privacy Policies," I/S: A Journal of Law and Policy for the Information Society (2008).
The point estimate works out to roughly 40 minutes a day, more than half of the 72 minutes a day the researchers cited for average internet use at the time. Valued against 2008 wage data, that is $3,534 a year in lost time per person, and $781 billion a year nationally if every American online read every policy they encountered just once. Those figures are now nearly two decades old and web traffic patterns have shifted since 2008, so treat the dollar amounts as a period estimate of scale rather than a current price tag. No comparable large-scale replication of the full time-and-cost calculation has been published since.
Why don't more people read privacy policies?
The math above answers its own question. A 10-minute document times dozens of sites a year adds up fast, and 61% of Americans already doubt the policy will explain anything useful once they open it, per Pew's 2023 survey. Reading feels like a cost with no clear payoff, so most people skip straight to clicking agree.
Figure 4: The friction path from an unread policy to a click on agree. Source: Pew Research Center (2019, 2023); McDonald and Cranor (2008).
Policy length and density are within a site owner's control even when consumer reading habits are not. A privacy policy that states what data you collect, why, and who it goes to in plain language gives the small share of visitors who do try to read it an actual chance to finish, and it is the same policy that regulators check first during a complaint or audit regardless of whether a visitor ever opened it. Sites that need one can generate a clear, plain-language privacy policy covering those disclosures without padding it to the length that discourages reading in the first place.
Has privacy policy reading behavior changed over time?
The direction of travel is visible across two decades of research, even though each study asked a slightly different question. In 2000, the Federal Trade Commission reported that 92% of commercial websites collected some type of personal data, but only 14% provided comprehensive notice of their practices, as cited in McDonald and Cranor's 2008 analysis. By 2008, Carnegie Mellon researchers were pricing out the true cost of reading every policy a person encounters. By 2019, Pew found only 9% of Americans always read one. By 2023, Pew found 56% frequently click agree without reading at all, and the share who say they understand little or nothing about company data practices had climbed from 59% to 67%.
Figure 5: Two decades of research on privacy notice and reading behavior. Source: FTC (2000, as cited in McDonald and Cranor 2008); McDonald and Cranor (2008); Pew Research Center (2019, 2023).
Notice has gotten more common since 2000. Reading has not kept pace with it, and by Pew's own trust and understanding numbers, the gap between having a policy and being understood by the people agreeing to it has widened rather than closed. This specific question sits inside a much larger dataset on consumer attitudes, which the 2026 data privacy statistics roundup covers in full alongside regulation support, buying behavior, and enforcement trends.
The Bottom Line
Depending on which Pew survey question you use, somewhere between 9% and 22% of Americans read a privacy policy carefully before agreeing to it, and a majority, 56%, say they routinely click agree without reading at all. That behavior is rational given the numbers: a 10-minute document repeated across 119-plus sites a year adds up to roughly 244 hours, and most readers already doubt the document will tell them anything useful. For a site owner, the practical implication is not that visitors will start reading, most will not, but that the same policy still has to hold up when a regulator, a partner, or the 22% of readers who do finish it checks what it actually says. A short, accurate, plain-language policy protects you whether or not anyone reads it, and gives the minority who try an actual chance to finish.
Frequently Asked Questions
What percentage of people read privacy policies before agreeing to them? Just 9% of Americans say they always read a company's privacy policy before agreeing, and only 22% of people who read privacy policies at all read them all the way through, according to Pew Research Center's June 2019 survey of 4,272 U.S. adults. A newer 2023 Pew survey, using different question wording, found that 56% frequently click agree without reading the content first.
How long would it take to read every privacy policy you agree to in a year? About 244 hours a year, per a Carnegie Mellon University analysis published in 2008, the most detailed calculation available of the actual reading burden. That point estimate assumes an average American visits at least 119 unique websites a year and reads each site's roughly 2,500-word privacy policy at 250 words per minute.
Why don't more people read privacy policies? 69% of Americans say privacy policies are just something to get past rather than a meaningful disclosure, and 61% think the policies are ineffective at explaining how companies actually use personal data, according to Pew Research Center's 2023 survey of 5,101 U.S. adults.
Has privacy policy reading behavior changed over time? It has moved in the wrong direction. 67% of Americans said in 2023 that they understand little or nothing about what companies do with their personal data, up from 59% in Pew Research Center's 2019 survey, even as more people report routinely clicking agree without reading.
Where the Numbers Come From
- Pew Research Center. (2023). "How Americans View Data Privacy." Survey of 5,101 U.S. adults conducted May 15 to 21, 2023. Source for the 56% click-agree, 61% ineffective, 67% understand little or nothing, 69% just something to get past, and 73% little control figures.
- Pew Research Center. (2019). "Americans and Privacy: Concerned, Confused and Feeling Lack of Control Over Their Personal Information." Survey of 4,272 U.S. adults conducted June 3 to 17, 2019. Source for the 9% always, 13% often, 38% sometimes, 36% never, and 22% read-all-the-way-through figures.
- McDonald, Aleecia M., and Lorrie Faith Cranor. (2008). "The Cost of Reading Privacy Policies." I/S: A Journal of Law and Policy for the Information Society, 2008 Privacy Year in Review issue, Carnegie Mellon University. Source for the 2,500-word average policy length, 10-minute average reading time, 244-hour point estimate, and $781 billion national opportunity cost figures.
- Federal Trade Commission. (2000). "Privacy Online: Fair Information Practices in the Electronic Marketplace." Cited via McDonald and Cranor (2008) for the finding that 92% of commercial websites collected personal data but only 14% provided comprehensive notice.
Note: All figures verified as of August 2026. The Carnegie Mellon dollar-cost estimates date to 2008 wage and traffic data and are presented as a period estimate of scale rather than a current figure; no comparable full-scale replication has been published since. The 2019 and 2023 Pew Research Center figures use different question wording and are not a direct year-over-year trend line. This post will be refreshed as newer large-scale survey data becomes available.
