Factors Determining the Extent of GDPR Implementation Within Organizations: Empirical Evidence From Czech Republic

Abstract

In this paper, the key factors that affect the extent of GDPR implementation in enterprises are analysed. Since 2018, all organizations operating in the European Union or processing personal data of EU citizens have had to incorporate a new regulation in their work. After three years of experience, possible key factors that significantly affect the cost of the entire project have been theoretically identified. However, a research gap remains whether the factors thus defined actually have a real impact on the implementation within organizations. Therefore, this study focuses on an empirical investigation of those characteristics using quantitative approach combining Chi-squared tests and the Classification and Regression Tree method. Based on a survey of organizations in the Czech Republic, this paper outlines that the size of the organization, the typology of personal data processed and the way GDPR is implemented determine the scope of the implementation project within organizations. On the other hand, there is no clear evidence that there is significant role in whether it is a public or private organization.

Challenges and Enablers for GDPR Compliance: Systematic Literature Review and Future Research Directions

“…It should be noted that the number of articles in WoS and Scopus regarding LGPD was about 2% in both situations. The extracted sample has only two articles about LGPD [79] and [77], and no one in Portuguese.…”

“…Doe [74] shows a general discussion on the implementation of GDPR in the EU. Cordeiro [75] for Portugal, Mitrou [76] for Greece, Faifr and Januska [77] for the Czech Republic and Canedo et al [78] discuss the implementation of the LGPD in Brazil.…”