Although social media (SM) represents an entirely new means of creating and sharing knowledge, it also presents entirely new challenges in protecting confidential information and other data that companies do not want to share. Companies that want to use SM for knowledge creation and sharing have to ensure they are able to provide adequate protection of their knowledge. However, knowledge protection and security-oriented knowledge management processes have received little attention in prior studies. This research attempts to close that gap; it examines which information and knowledge protection challenges arise from SM, and why they arise. Our three main findings include 1) a number of challenges for knowledge protection in social media, 2) a number of special characteristics of social media, which are causes for the knowledge protection challenges, and 3) a number of questions that, when answered by the company, can help to react to the identified knowledge protection challenges. Our findings increase the understanding of the dynamics between information security, knowledge protection, and the special characteristics of social media. In addition, our findings open up a number of future research questions and provide companies a tool for creating knowledge protection policies concerning the use of SM.

The General Data Protection Regulation (GDPR) was enforced in the pan-European area on May 25 th , 2018. From the perspective of data access research, among others, this introduces significant changes into organizations and their practices. However, so far, there is limited research offering insights into such a new policy phenomenon for organizations from the perspective of access to personal data. This paper is based on an ethnographic study of a 2-day workshop in which five European insurance organizations came together to share the results of sensemaking in their organizations and knowledge around the GDPR. We examined how the participants interpreted the GDPR and the compliance challenges they faced. These challenges are categorized into four dimensions of personal data access, as follows: Procedure, Protection, Privacy, and Proliferation. These challenges are significant for any organization that acts as a processor and/or controller to consider.

No abstract

Background Advanced sensor, measurement, and analytics technologies are enabling entirely new ways to deliver health care. The increased availability of digital data can be used for data-driven personalization of care. Data-driven personalization can complement expert-driven personalization by providing support for decision making or even by automating some parts of decision making in relation to the care process. Objective The aim of this study was to analyze how digital data acquired from posture scanning can enhance physiotherapy services and enable more personalized delivery of physiotherapy. Methods A case study was conducted with a company that designed a posture scan recording system (PSRS), which is an information system that can digitally record, measure, and report human movement for use in physiotherapy. Data were collected through interviews with different stakeholders, such as health care professionals, health care users, and the information system provider, and were analyzed thematically. Results Based on the results of our thematic analysis, we propose three different types of support that posture scanning data can provide to enhance and enable more personalized delivery of physiotherapy: 1) modeling the condition, in which the posture scanning data are used to detect and understand the health care user’s condition and the root cause of the possible pain; 2) visualization for shared understanding, in which the posture scanning data are used to provide information to the health care user and involve them in more collaborative decision-making regarding their care; and 3) evaluating the impact of the intervention, in which the posture scanning data are used to evaluate the care progress and impact of the intervention. Conclusions The adoption of digital tools in physiotherapy has remained low. Physiotherapy has also lacked digital tools and means to inform and involve the health care user in their care in a person-centered manner. In this study, we gathered insights from different stakeholders to provide understanding of how the availability of digital posture scanning data can enhance and enable personalized physiotherapy services.

Abstract. Conventional IS outsourcing does not always meet expectations, often because the company lacks control over the outsourced activity. Quasi-outsourcing collaboration, where the company transfers its IS personnel to a subsidiary, allows the company to maintain more control over the relationship than in conventional outsourcing. In this qualitative case study of two Finnish companies, differences between success factors of IS quasi-outsourcing and conventional outsourcing are identified and discussed. The study has practical and theoretical implications. We identified 1) success factors of conventional outsourcing that are already fulfilled (e.g. trust) or less challenging (e.g. physical information technology infrastructure) in quasi-outsourcing, 2) success factors that are more challenging in quasi-outsourcing than in conventional outsourcing (e.g. structured interaction processes), and 3) success factors that proved important in both types of outsourcing but showed qualitative differences (e.g. mutual dependency). Our findings can help companies make a more informed choice between these two types of outsourcing.