This risk category includes decreased (consumer) confidence. Examples are deterrent effects that lead to data subjects not making use of medical services, certain advisory services or other behavioural options. A lower expectation of confidentiality on the part of the data subject prevails, for example, in the case of generally accessible data and even more so in the case of data made public by the data subject. A higher expectation of confidentiality exists, for example, in the case of data subject to specific confidentiality regulations. In the GDPR confidentiality expectations are used as an interpretation criterion for balancing the legitimate interest of the controller/third person and the interests of the data subject (Rec. 47 sent. 1 and Rec. 50 sent. 6).