Skip to content

Communication Privacy Management Theory

A communication framework models disclosure as rule-governed movement from a personal privacy boundary to a boundary shared with recipients.

Version
v1 · 2026-10-31 · History
Domain-specific #
14474
Domain group
Social Sciences
Origin domain
Communication & Media Studies
Subdomains
Interpersonal Communication, Privacy Management → Communication & Media Studies
Aliases
CPM theory, Communication boundary management theory

Core Idea

Communication Privacy Management (CPM) theory explains disclosure and concealment through boundaries around information people regard as private. The person who initially controls the information develops rules about whether, when and to whom to tell it. Disclosure changes the structure of the boundary: another person now knows the information and, in the theory's vocabulary, becomes a co-owner with a role in managing its further circulation. The participants may coordinate who else is linked to the boundary, how permeable it is, and who has what say over onward disclosure. When expectations diverge or a rule is broken, boundary turbulence can arise.[1][2]

These are analytical roles, not legal property claims. “Co-owner” means a recipient participates in the management of private information, not that title has passed under property law. The theory also does not assume every disclosure is preceded by an explicit agreement, every conflict is resolved, or every privacy decision is a calculated maximum of benefits over risks. Petronio's earlier formulation was called communication boundary management; she states that the name changed to communication privacy management with the 2002 volume.[3]

How would you explain it like I'm…

The Secret Fence

Imagine your secrets live inside a little fence, and you decide who gets to come in. When you tell a friend, your friend is now inside the fence too, and you both help decide who else can know. If someone tells when they weren't supposed to, things get bumpy.

Sharing Secrets Makes Co-Owners

Communication Privacy Management theory is about how people decide what private things to share and what to keep to themselves. It pictures private information inside a boundary, like a fence. The person who has the information makes rules about whether, when, and who to tell. Once you tell someone, they're inside the boundary too and become a 'co-owner' who helps decide who else can find out. If people expect different things, or someone breaks a rule, trouble called 'boundary turbulence' can happen.

Privacy Boundary Management

Communication Privacy Management (CPM) theory, developed by Petronio, explains how people reveal and conceal private information using the idea of boundaries. The person who first controls the information creates rules about whether, when, and to whom to disclose it. Disclosure reshapes the boundary: the listener now knows the information and becomes a 'co-owner' who shares responsibility for where it goes next. The people involved may coordinate who else is let in, how open the boundary is, and who gets a say over further sharing. When expectations clash or a rule is broken, 'boundary turbulence' results. 'Co-owner' is a role in managing information, not legal ownership, and the theory doesn't assume every disclosure has an explicit agreement or is a careful cost-benefit calculation.

 

Communication Privacy Management (CPM) theory explains disclosure and concealment through metaphorical boundaries around information people regard as private. The original controller of the information develops privacy rules governing whether, when, and to whom it is revealed. Disclosure restructures the boundary: the recipient becomes a co-owner who participates in managing the information's further circulation. Co-owners may coordinate boundary linkage (who else is included), boundary permeability (how much flows out), and boundary ownership (who has what say over onward disclosure). When expectations diverge or rules are violated, boundary turbulence can arise. These are analytical roles, not property claims: co-ownership does not mean legal title has transferred. The theory also does not assume that every disclosure follows an explicit agreement, that every conflict is resolved, or that privacy decisions are calculated maximizations of benefit over risk. Petronio's earlier name for the theory was communication boundary management; she renamed it communication privacy management with the 2002 volume.

Structural Signature

  1. Private information and claimant: an individual treats particular information as theirs to regulate.
  2. Personal boundary and disclosure rule: a practical distinction between what remains private and what may be shared, shaped by context and relationship.
  3. Recipient and collective boundary: disclosure creates another participant who can preserve, reinterpret or pass on the information.
  4. Coordination dimensions: boundary linkage concerns who is included; permeability concerns how readily information passes; ownership concerns the parties' expected control and responsibility.[2]
  5. Possible turbulence: incompatible or violated expectations make the shared boundary unstable; this is a possible outcome, not a necessary stage.

Condensed: claimed private information → rule-guided disclosure → shared boundary and coordinated obligations → possible turbulence.

Sig role-phrases: private-information claimant; personal disclosure rule; recipient as social co-owner; linkage/permeability/ownership coordination; possible rule-mismatch turbulence.

What It Is Not

  • Not a legal theory of property rights in data. Ownership and co-ownership are communication-theory metaphors for control and stewardship.
  • Not simply self-disclosure. The distinctive residual is what happens to privacy boundaries once a recipient is involved.
  • Not a required rational cost-benefit algorithm. People can form privacy rules through relationships, cultural norms, context and emotion; a risk-benefit consideration is only one possible influence.
  • Not a universal guarantee of trust or secrecy. A co-owner can misunderstand, disagree with or violate an expected rule.
  • Not a deterministic repair cycle. Turbulence can prompt clarification, conflict, adjustment or no successful resolution; the theory does not force renegotiation or relationship withdrawal.
  • Not Social Penetration Theory. That adjacent theory concerns relational development and layers of disclosure; CPM centers the control and coordination of private information after sharing.

Scope of Application

In interpersonal relationships, one person can tell another something private while expecting restricted onward disclosure. The recipient may infer a different rule, even without intending harm. CPM makes that mismatch analyzable by separating the personal boundary from the collective one and asking whether the permitted audience and degree of passage were actually coordinated. Petronio's original 1991 paper examined this boundary-coordination problem in marital communication.[1]

In families and small groups, information initially held by one member can become jointly managed once a relative or friend is told. An unspoken expectation about whom else may know it is a coordination problem, not merely a binary choice between tell and conceal. The 2002 book explicitly places privacy management in everyday relationships and treats rule breakdown as a source of turbulence.[2]

In online communication, platform audience controls and social permission can diverge. DeGroot and Vik's original open-ended-questionnaire study of Facebook confidentiality breaches reports premature announcement of secrets and finds that absent explicit rules contributed to violations and boundary turbulence. Its introduction gives an illustrative public pregnancy-congratulation post; the abstract reports the questionnaire findings at aggregate level. Neither the introduction's example nor the abstract licenses treating every screenshot/forwarding scenario as an observed participant incident.[4] Waters and Ackerman's separate original 59-survey Facebook study reports perceived motivations and consequences of voluntary disclosure, not a directly observed specific co-owner breach; it is useful for the disclosure side but should not be mis-cited as proof of a forwarding violation.[5]

In health communication, a patient, clinician and family member can disagree over who controls the timing and framing of medical information. Petronio, Helft and Child apply CPM to a composite teaching case of surgical-error disclosure, not to an observed patient encounter. Their analysis distinguishes the patient's claim to her health information from the clinician's stewardship and possible wish to delay or frame the disclosure, making co-ownership and rule mismatch visible in a setting unlike Facebook posting.[6]

Clarity

Separate access, permission, and understanding. Someone can have technical access to an item without believing they are permitted to redistribute it; another recipient may believe further sharing is expected. A limited audience setting is evidence about access, not by itself evidence of a mutually agreed social rule.

Specify the boundary dimensions rather than calling all breaches “privacy violations.” Was the problem that an unexpected person became linked, too much detail passed through a known link, or control over onward use was disputed? The categories direct inquiry toward different coordination failures.[2]

Manages Complexity

The framework compresses a tangled social episode into distinct roles: information claimant, rule, disclosure, co-owner, shared boundary and turbulence. This prevents an analyst from reducing the episode to the discloser's one-time choice. It also exposes a limitation: applying the model requires evidence about each participant's expectations. An observer cannot infer the exact rule merely because a relationship exists or a platform control was set.

Abstract Reasoning

Begin with a particular item of private information and the person who treats it as controlled. Describe the rule that person appears to apply before disclosure; do not invent a fully explicit policy when the evidence shows only a tacit norm. Identify who received access, how each person understood their role, and which linkage, permeability or ownership expectation mattered. A turbulence claim then requires a discrepancy or breakdown, not just an uncomfortable outcome.

Counterfactual analysis helps: if the recipient had understood the same rule, would the incident still occur? If no one had received the information, would the claimed collective boundary exist? These questions isolate the theory's mechanism from generic secrecy, general interpersonal conflict and legal data ownership.

Knowledge Transfer

CPM travels from face-to-face relationships to mediated sharing when the same role structure exists: a claimant, private content, a recipient, and expectations about future access or circulation. The transfer requires attention to different affordances. In an online group, copying can make permeability easy and audience boundaries hard to inspect; in a conversation, memory and social relationships shape onward transmission. The same vocabulary may organize both, but empirical conclusions from one setting do not automatically predict the other.[5]

Examples

Premature pregnancy announcement in the breach study

DeGroot and Vik open their original Facebook-boundary-turbulence article with a public congratulation on a pregnancy before the pregnant person has announced it. This is the authors' illustrative opening scenario, not an individually documented questionnaire transcript. The claimant is the pregnant person or couple; the information is pregnancy status; the private rule is “not yet for a public audience,” implied by the premature-announcement framing. A friend who knows the news has been linked as a social co-owner, then moves it through a public Facebook post to additional viewers. Linkage expands to new people, permeability becomes effectively high, and control over who announces the news is disputed. The study's abstract separately reports questionnaire findings that lack of established explicit rules contributed to privacy violations and turbulence, including prematurely announced secrets; it does not permit assigning that aggregate finding to this exact illustrative person.[4]

Mapped back: claimant and not-yet-public rule → initial sharing with a friend/co-owner → public post widens linkage and passage → disagreement over announcement control → source-argued turbulence, with illustrative scene separated from aggregate observation.

Mrs. Brown medical-error disclosure, a composite teaching case

Petronio, Helft and Child explicitly present Mrs. Brown as a composite used to train surgery residents. During an operation, the surgeon inadvertently cuts and repairs her common bile duct; a subsequent leak requires a second operation. In the ICU he initially attends to her pain without explaining the error. Her husband asks what happened and whether she will be all right. The surgeon then apologizes and identifies the damaged duct, but frames the injury partly through complication risk and Mrs. Brown's pre-existing condition. The authors analyze this sequence as a difference in privacy rules: Mrs. Brown is the original claimant of her health information, the clinician has received it as a steward/co-owner, and the husband seeks information as a family co-owner whom the authors treat as likely authorized. The clinician's delay and framing preserve more control than the family appears to expect. This is a source-authored illustration of possible turbulence and competing obligations, not empirical evidence that an actual patient felt blamed or that a particular legal consent form existed.[6]

Mapped back: patient claimant and expectation of being told → clinician steward/co-owner → husband's request as a co-owner disclosure trigger → delayed and qualified explanation reveals rule mismatch over timing and control → source-argued risk of turbulence, without inventing an observed outcome.

Voluntary Facebook disclosure as context, not a co-owner test

Waters and Ackerman surveyed 59 undergraduates in a public-speaking course, using questions about reasons and perceived consequences of voluntary Facebook disclosure. They report information sharing, information storage/entertainment, keeping up with trends and showing off among the motivations; perceived relationship/psychological benefit and time-consuming habitual use among consequences. In CPM terms, a posting user voluntarily opens a boundary to an audience for social purposes, but the study did not document a named recipient's onward disclosure or test one exact linkage/ownership rule. The reported data therefore support a bounded disclosure-decision setting, not the invented screenshot incident from the earlier draft or a demonstrated turbulence rate.[5]

Mapped back: user as claimant, voluntary posting as a rule-governed opening, Facebook audience as the shared-information context, and perceived benefits/costs as reported motivations/consequences; recipient-specific co-ownership coordination and turbulence are unobserved, so this is context rather than a second positive execution of the full CPM mechanism.

A personal boundary without co-ownership

A person decides not to reveal a private diary entry. CPM can still describe a personal disclosure rule, but no recipient has become a co-owner, so this is not yet a case of collective boundary coordination or turbulence.

Mapped back: private information and rule are present; shared boundary and recipient are absent.

Structural Tensions

Relationship and care gain versus retained control. Disclosure can enable support from a friend or care coordination among patient, clinician and family. Yet expanding the circle gives others practical power to announce or frame the information: the premature Facebook congratulation wrests announcement timing from the claimant, while the Mrs. Brown composite exposes the opposite problem of a clinician controlling error information longer and more tightly than the family expects. Strict concealment or exclusion protects one boundary but forgoes the relationship or care benefit. These are source-illustrated decision costs, not a claim that the composite is an observed clinical outcome. Diagnostic: which benefit required this recipient, and which party then controlled the next disclosure's audience, timing and frame?[4][6]

Tacit ease versus explicit coordination cost. Leaving onward-disclosure rules unspoken makes ordinary conversation frictionless and can avoid signaling distrust; in DeGroot and Vik's studied setting, lack of established explicit rules was associated with privacy violations and boundary turbulence. Stating a rule before disclosure can clarify linkage and announcement authority, but requires an awkward negotiation and still cannot guarantee compliance. Diagnostic: was “you may know but not announce” actually communicated to the co-owner before the wider post?[4]

Structural–Framed Character

CPM sits toward the socially framed side of the structural–framed spectrum. Its role sequence—claimed private information, personal rule, disclosure, recipient/co-owner, collective boundary and possible turbulence—is a reusable analytical structure. But privacy is not a physical wall and “ownership” is not a legal title: what is private, whether a telling grants further permission, and what counts as a violation depend on relationships, culture, medium and expressed or tacit norms. Evaluative weight is high, because claimants and recipients may value intimacy, support, autonomy, respect and protection differently. One party's helpful public congratulation may be another's breach of timing and audience control.[4][2]

Human practice creates the boundary: people decide what to tell, infer or negotiate rules, co-own information socially and respond to a mismatch. The theory arose in Sandra Petronio's communication research, with a 1991 marital-boundary formulation and a 2002 renamed book; the book develops the renamed theory. The vocabulary travels to Facebook when actual people, private content, disclosure and social rules can be traced, but a software visibility setting alone does not prove social agreement. Calling any data-access check “CPM” imports its words without the interpersonal mechanism; observing a claimant-recipient dispute over onward disclosure recognizes the structure even if participants never use the theory's name. Its character: an interpretive and norm-sensitive communication model with stable role distinctions, whose explanatory claims require evidence about participants' rules rather than metaphoric boundary talk.[1][2][4]

Structural Core vs. Domain Accent

The portable skeleton is a transition from one claimant's controlled information to shared stewardship, with coordination dimensions and possible rule mismatch. The domain-bound mechanism is communicative privacy: a person treats information as private, discloses to another, and both must interpret social obligations over linkage, permeability and ownership. A packet-access-control list can grant a user read permission, but it does not by itself tell us whether that user believes forwarding violates a relational promise.

Human rule interpretations and Petronio's co-owner/turbulence vocabulary are constitutive of the named theory. The live Boundary prime is a broad conceptual neighbor, but its current generic separation identity does not automatically supply personal/collective privacy rules. Social Penetration Theory is an adjacent domain-specific disclosure account focused on relationship development, not a verified strict parent.

Boundary provides a general idea of separation. Social Penetration Theory is a related account of disclosure and relationship development.

Neighborhood in Abstraction Space

Communication Privacy Management Theory sits in a sparse region of the domain-specific corpus (99th percentile for distinctiveness): few abstractions share its structure, so a faithful description tends to retrieve it precisely.

Family — Unclustered & Miscellaneous (2835 abstractions)

Nearest neighbors

Computed from structural-signature embeddings · 2026-10-31

Not to Be Confused With

Self-Disclosure is the act or pattern of revealing oneself; CPM adds boundary rules and co-owner coordination. Social Penetration Theory models gradual relational development through disclosure rather than the same ownership/linkage/permeability mechanism. Access Control specifies technical permissions and may differ from tacit social rules. Legal Data Ownership addresses rights under law, not the theory's co-owner metaphor.

References

[1] Petronio, Sandra (1991), “Communication Boundary Management, A Theoretical Model of Managing Disclosure of Private Information Between Marital Couples”, Communication Theory 1: 311–335, doi:10.1111/j.1468-2885.1991.tb00023.x. registry ↩a ↩b ↩c

[2] Petronio, Sandra (2002), Boundaries of Privacy, Dialectics of Disclosure, SUNY Press. Original book record and indexed excerpts; full chapters not read. registry ↩a ↩b ↩c ↩d ↩e ↩f

[3] Petronio, Sandra (2013), “Brief Status Report on Communication Privacy Management Theory”, doi:10.1080/15267431.2013.743426. Author note on 2002 renaming. registry ↩

[4] DeGroot, Jocelyn M., and Tennley A. Vik (2017), “We were not prepared to tell people yet, Confidentiality breaches and boundary turbulence on Facebook”, Computers in Human Behavior 70: 351–359, doi:10.1016/j.chb.2017.01.016. Introduction and abstract; full participant narratives not read. registry ↩a ↩b ↩c ↩d ↩e ↩f

[5] Waters, Susan, and James Ackerman (2011), “Exploring Privacy Management on Facebook, Motivations and Perceived Consequences of Voluntary Disclosure”, Journal of Computer-Mediated Communication 17: 101–115, doi:10.1111/j.1083-6101.2011.01559.x. Survey context. registry ↩a ↩b ↩c

[6] Petronio, Sandra, Paul R. Helft, and Jeffrey T. Child (2013), “A case of error disclosure, a communication privacy management analysis”, Journal of Public Health Research 2: e30, doi:10.4081/jphr.2013.e30. Original composite teaching case. registry ↩a ↩b ↩c