Consumer perspectives on information privacy following the implementation of the GDPR

Presthus, Wanda; Sørum, Hanne

doi:10.12821/ijispm070302

Cited by 16 publications

(5 citation statements)

References 17 publications

(37 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Regulation (Presthus & Sørum, 2019). With regard to MOOCs, employers may express skepticism about the value of MOOC certificates (Radford et al, 2014), particularly because not all classes are career relevant (Kizilcec & Schneider, 2015).…”

Section: On the Ethical Issues Posed By The Exploitation Of Users' Da...mentioning

confidence: 99%

On the Ethical Issues Posed by the Exploitation of Users’ Data in MOOC Platforms: Capturing Learners’ Perspectives

Cisel

2023

IRRODL

View full text Add to dashboard Cite

Due notably to the emergence of massive open online courses (MOOCs), stakeholders in online education have amassed extensive databases on learners throughout the past decade. Administrators of online course platforms, for instance, possess a broad spectrum of information about their users. This information spans from users’ areas of interest to their learning habits, all of which is deduced from diverse analytics. Such circumstances have sparked intense discussions over the ethical implications and potential risks that databases present. In this article, we delve into an analysis of a survey distributed across three MOOCs with the intention to gain a deeper understanding of learners’ viewpoints on the use of their data. We first explore the perception of features and mechanisms of recommendation systems. Subsequently, we examine the issue of data transmission to third parties, particularly potential recruiters interested in applicants’ performance records on course platforms. Our findings reveal that younger generations demonstrate less resistance towards the exploitation of their data.

show abstract

Section: On the Ethical Issues Posed By The Exploitation Of Users' Da...mentioning

confidence: 99%

On the Ethical Issues Posed by the Exploitation of Users’ Data in MOOC Platforms: Capturing Learners’ Perspectives

Cisel

2023

IRRODL

View full text Add to dashboard Cite

show abstract

“…Capgemini's survey (2018) also showed, in practice, that most of the companies in Europe and the United States were not ready in time for GDPR. Surveys by Dell (2016), KPMG (2017), Addis andKutar (2018), andPresthus et al (2018) noted the lack of SA of GDPR to be common in many organisations.…”

Section: Early Workmentioning

confidence: 99%

Building Situational Awareness of GDPR

Hirvonen

Kari

2023

eccws

View full text Add to dashboard Cite

Because previous academic research does not comment sufficiently on how the relevant content of the European Union (EU) General Data Protection Regulation (GDPR has been properly communicated to the organisations, or how the situational awareness (SA) of GDPR has been built in the organisations, this qualitative empirical research was regarded as a valuable approach for gathering authentic research material on the practical bases of this phenomena. The aim of this empirical case study (CS) is to develop a picture of what processes organisations use to build SA of the GDPR requirements. To guide the CS, we asked how the SA for decision-making was constructed and how it was perceived in organisations. The experiences of eight Finnish organisations showed that the organisations’ practices of building SA and their experiences with the quality and adequacy of SA differed. However, building SA proved to be a critical step for organisations in the overall process of meeting GDPR requirements. Especially the data coming from inside the organisation became very relevant in the SA process, because it supported decision makers to determine how the GDPR requirements should be implemented in the organisation. As a main contribution of this article, based on best practices shared by organisations a model of building SA was built. The proposed model is threefold and was constructed by combining the findings of an empirical CS analysis, the steps of the intelligence process, and the essential elements of the model of creating information security SA. The result is potentially beneficial for building situational understanding of any complex or ambiguous issue, especially in complex and digitalised technological areas, where combining information management with accurate and efficient decision-making is a common challenge. The results can be used by any party who is looking to build SA of an abstract issue in a complex environment.

show abstract

“…Another study from the data subjects' (in this case as the role of consumers) perspective was conducted by [30]. Based on a survey, three insights were gained in the wake of the implementation of the GDPR: (1) consumers had increased knowledge about their information privacy; however, they remained rather unconcerned about executing their enhanced rights.…”

Section: The General Data Protection Regulation (Gdpr)mentioning

confidence: 99%

An analysis of violations and sanctions following the GDPR

Presthus

Sønslien

2021

IJISPM

Self Cite

View full text Add to dashboard Cite

This paper investigates the violations and sanctions that have occurred following the implementation of the General Data Protection Regulation (GDPR). The GDPR came into effect in May 2018 with the aim of strengthening the information privacy of European Union/European Economic Area citizens. Based on existing taxonomies of (i) potential consequences of violating the GDPR (including surveillance, discrimination), (ii) an analysis of 277 sanctions, and (iii) interviews with experts, we offer a mapping of the violations and sanctions almost two years after the regulation was implemented. The most typical complaints were, in descending order: unlawful processing and disclosure of personal information, failure to act on and secure subject rights and personal information, and insufficient cooperation with supervising authorities. Our analysis also indicates an increasing number of fines over time. Regarding size, the fines range from 50,000,000 euros to (symbolic?) 90 euros. While research on GDPR violations and sanctions is somewhat scarce, our study mainly confirms existing findings: that the GDPR is complex and challenging. However, our study provides insight on some of the challenges. Our contribution is mainly practical and aimed at managers in any organization whose goal is to protect information privacy and to learn from the mistakes made by other companies. We also welcome more research on the topic.

show abstract

Consumer perspectives on information privacy following the implementation of the GDPR

Cited by 16 publications

References 17 publications

On the Ethical Issues Posed by the Exploitation of Users’ Data in MOOC Platforms: Capturing Learners’ Perspectives

On the Ethical Issues Posed by the Exploitation of Users’ Data in MOOC Platforms: Capturing Learners’ Perspectives

Building Situational Awareness of GDPR

An analysis of violations and sanctions following the GDPR

Contact Info

Product

Resources

About