Journal
INFORMATION AND COMPUTER SECURITY
Volume 26, Issue 3, Pages 338-364Publisher
EMERALD GROUP PUBLISHING LTD
DOI: 10.1108/ICS-03-2018-0036
Keywords
Culture; Consumer protection; Information privacy; Data protection; Data privacy; Protection of personal information act (POPIA); General Data Protection Regulation (GDPR); Fair information practice principles (FIPPS); Organisation of Economic Coordination and Development (OECD)
Categories
Funding
- National Research Foundation of South Africa [105735]
Ask authors/readers for more resources
Purpose This paper aims to propose an information privacy culture index framework (IPCIF) with a validated information privacy culture index instrument (IPCII) to measure information privacy culture across nations. The framework is based on consumers' privacy expectations, their actual experiences when organisations process their personal information and their general privacy concerns. Design/methodology/approach A survey method was deployed to collect data in South Africa - the first participating country in the study - to start building a global information privacy culture index (IPCI) and to validate the questionnaire. Findings The IPCI revealed that there seems to be a disconnect between what consumers expect in terms of privacy and the way in which organisations are honouring (or failing to honour) those expectations, which results in a breach of trust and the social contract being violated. Practical implications Governments, information regulators and organisations can leverage the results of the privacy culture index to implement corrective actions and controls aimed at addressing the gaps identified from a consumer and compliance perspective. The validated IPCII can be used by both academia and industry to measure the information privacy culture of an institution, organisation or country to identify what to improve to address consumer privacy expectations and concerns. Originality/value The IPCIF and validated IPCII are the first tools that combine the concepts of consumer expectations and their confidence levels in whether organisations are meeting their privacy expectations, which are in line with the fair information practice principles and the privacy guidelines of the Organisation for Economic Cooperation and Development, to determine gaps and define improvement plans.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available