{"corpus_id":204499518,"paper_sha":"b18b0035643925b1437bdd9446b71085f83cd9fa","doi":"10.1108/dprg-05-2019-0039","arxiv_id":null,"pmid":null,"pmcid":null,"mag_id":2974232067,"dblp_id":null,"acl_id":null,"title":"The benefits and challenges of general data protection regulation for the information technology sector","year":2019,"publication_date":"2019-08-12","venue":"Digital Policy Regulation and Governance","journal":{"name":"Digital Policy, Regulation and Governance","pages":null,"volume":null},"journal_issn":null,"journal_title":null,"publication_types":["Review"],"pubmed_pub_types":null,"s2_fields_of_study":["Business","Computer Science"],"reference_count":21,"citation_count":24,"influential_citation_count":3,"is_open_access":false,"arxiv_categories":null,"arxiv_license":null,"arxiv_journal_ref":null,"mesh_headings":null,"chemicals":null,"comments_corrections":null,"source_flags":1,"s2_open_access_pdf_url":null,"s2_open_access_landing_url":null,"s2_open_access_license":null,"s2_open_access_status":null,"pmc_open_access_pdf_url":null,"pmc_open_access_landing_url":null,"pmc_open_access_license":null,"pmc_open_access_status":null,"unpaywall_open_access_pdf_url":null,"unpaywall_open_access_landing_url":null,"unpaywall_open_access_license":null,"unpaywall_open_access_status":null,"abstract":"PurposeThe implementation of European data protection is a challenge for businesses and has imposed legal, technical and organizational changes for companies. This study aims to explore the benefits and challenges that companies operating in the information technology (IT) sector have experienced in applying the European data protection. Additionally, this study aims to explore whether the benefits and challenges faced by these companies were different considering their dimension and the state of implementation of the regulation.Design/methodology/approachThis study adopts a quantitative methodology, based on a survey conducted with Portuguese IT companies. The survey is composed of 30 questions divided into three sections, namely, control data; assessment; and benefits and challenges. The survey was created on Google Drive and distributed among Portuguese IT companies between March and April of 2019. The data were analyzed using the Stata software using descriptive and inferential analysis techniques using the ANOVA one-way test.FindingsA total of 286 responses were received. The main benefits identified by the application of European data protection include increased confidence and legal clarification. On the other hand, the main challenges include the execution of audits to systems and processes and the application of the right to erasure. The findings allow us to conclude that the state of implementation of the general data protection regulation (GDPR), and the type of company are discriminating factors in the perception of benefits and challenges.Research limitations/implicationsThis study has essentially practical implications. Based on the synthesis of the benefits and challenges posed by the adoption of European data protection, it is possible to assess the relative importance and impact of the benefits and challenges faced by companies in the IT sector. However, this study does not explore the type of challenges that are placed at each stage of the adoption of European data protection and does not take into account the specificities of the activities carried out by each of these companies.Originality/valueThe implementation of the GDPR is still in an initial phase. This study is pioneering in synthesizing the main benefits and challenges of its adoption considering the companies operating in the IT sector. Furthermore, this study explores the impact of the size of the company and the status of implementation of the GDPR on the perception of the established benefits and challenges.","claims":[{"public_id":"cl_ae957d37009063c6839bfa29bc9b9ce3","status":"active","text":"Executing audits of systems and processes and applying the right to erasure are the main challenges reported by Portuguese IT companies.","confidence":0.96,"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/claims/cl_ae957d37009063c6839bfa29bc9b9ce3"},{"public_id":"cl_2b65c330c63bf94e73e046848949095a","status":"active","text":"Increased confidence and legal clarification are the main benefits reported by Portuguese IT companies from adopting European data protection requirements.","confidence":0.96,"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/claims/cl_2b65c330c63bf94e73e046848949095a"},{"public_id":"cl_5e08668ccc3dfdad0605dedbda4ca796","status":"active","text":"Survey responses from 286 Portuguese IT companies support the reported benefit and challenge synthesis.","confidence":0.88,"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/claims/cl_5e08668ccc3dfdad0605dedbda4ca796"},{"public_id":"cl_68edae616f6391744682ba221787b205","status":"active","text":"The state of GDPR implementation and company type are discriminating factors in how benefits and challenges are perceived.","confidence":0.95,"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/claims/cl_68edae616f6391744682ba221787b205"}],"concepts":[{"public_id":"co_0698d053a749522a57f7fa6697e5f5c0","status":"active","name":"survey","description":"A questionnaire-based data collection instrument used to gather responses from companies.","types":["method"],"aliases":[],"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/concepts/co_0698d053a749522a57f7fa6697e5f5c0"},{"public_id":"co_2f71a409b889f0d36273366bef46723c","status":"active","name":"audits to systems and processes","description":"Review procedures applied to technical systems and organizational processes for compliance purposes.","types":["challenge"],"aliases":["system audits","process audits"],"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/concepts/co_2f71a409b889f0d36273366bef46723c"},{"public_id":"co_6ec4283ff159c09f8e53a297000ac5dc","status":"active","name":"information technology sector","description":"The business sector composed of companies that provide information technology products or services.","types":["sector"],"aliases":["IT sector"],"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/concepts/co_6ec4283ff159c09f8e53a297000ac5dc"},{"public_id":"co_6f42aa3cc93b81425c5502ead1df89fd","status":"active","name":"increased confidence","description":"A perceived benefit involving greater trust or assurance after adopting the regulation.","types":["perceived benefit"],"aliases":[],"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/concepts/co_6f42aa3cc93b81425c5502ead1df89fd"},{"public_id":"co_751a56a6a4c07063ca41abbad6489643","status":"active","name":"Portuguese IT companies","description":"Information technology companies in Portugal that responded to the survey.","types":["organization group"],"aliases":["Portuguese information technology companies"],"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/concepts/co_751a56a6a4c07063ca41abbad6489643"},{"public_id":"co_866facb79c2b65190be6d5a5fd184a92","status":"active","name":"European data protection","description":"The European data protection framework whose implementation and effects are assessed in the study.","types":["regulatory framework"],"aliases":["European data protection regulation"],"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/concepts/co_866facb79c2b65190be6d5a5fd184a92"},{"public_id":"co_94745f5f0fee0b357e90134c02b00a73","status":"active","name":"general data protection regulation","description":"The European Union data protection law examined in relation to its adoption by IT companies.","types":["regulation"],"aliases":["GDPR"],"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/concepts/co_94745f5f0fee0b357e90134c02b00a73"},{"public_id":"co_a85e0e75a1dc89e7e0264faafed9c9de","status":"active","name":"legal clarification","description":"A perceived benefit involving clearer understanding of legal requirements and obligations.","types":["perceived benefit"],"aliases":[],"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/concepts/co_a85e0e75a1dc89e7e0264faafed9c9de"},{"public_id":"co_aa2ec37ad7dd313b220d1620ad4de99c","status":"active","name":"state of implementation","description":"The extent to which GDPR adoption has been carried out within a company.","types":["organizational state"],"aliases":["implementation status"],"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/concepts/co_aa2ec37ad7dd313b220d1620ad4de99c"},{"public_id":"co_d664c1c4ab57f968900b3f189831f58b","status":"active","name":"right to erasure","description":"The legal right to have personal data deleted under data protection law.","types":["legal right"],"aliases":["right to be forgotten"],"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/concepts/co_d664c1c4ab57f968900b3f189831f58b"},{"public_id":"co_dad8e993948c85fa9bda4a5b967e29b3","status":"active","name":"company type","description":"A classification of firms by organizational category used to compare perceptions of benefits and challenges.","types":["organizational attribute"],"aliases":["type of company"],"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/concepts/co_dad8e993948c85fa9bda4a5b967e29b3"},{"public_id":"co_f8e32968882cc2681e4694c6068c4280","status":"active","name":"286 responses","description":"The total number of survey responses received for the analysis.","types":["sample size"],"aliases":["286 survey responses"],"contributors":[{"id":1,"public_id":"12632b8b5f","public_label":"Anonymous (12632b8b5f)","roles":["extraction"],"url":"https://sah.borca.ai/u/12632b8b5f"}],"url":"https://sah.borca.ai/concepts/co_f8e32968882cc2681e4694c6068c4280"}],"external_ids":{"DOI":"10.1108/dprg-05-2019-0039","ArXiv":null,"PubMed":null,"PubMedCentral":null,"MAG":2974232067,"DBLP":null,"ACL":null},"open_access":{"is_open_access":false,"pdf_url":null,"landing_url":"https://sah.borca.ai/papers/204499518","source":null,"pdf_url_source":null,"license":null,"reason":"pdf_url_not_indexed"},"reference_availability":{"status":"available","references_indexed":true,"full_text_available":false,"full_text_source":null,"count_basis":"semantic_scholar_metadata","extraction_status":"not_applicable","reason":null},"source":{"provider":"episteme2","base_corpus":"semantic_scholar_dump","freshness_mode":"unknown","basis":["semantic_scholar_metadata","postgres_metadata"],"limits":["paper metadata is based on indexed upstream scholarly datasets","claims and concepts are available only for extracted papers","absence of claims or concepts means no extracted graph data is available in this response"],"status":"available","degraded":false,"degraded_reasons":[],"diagnostics":{"status":"available","degraded":false,"degraded_reasons":[],"metadata_status":"available","graph_status":"available","abstract_status":"available"},"source_flags":1},"paper_id":632380,"paper_uid":"1bebd8f2-c4f7-4b1a-b1ce-3f542e9a26a6","canonical_identity":{"paper_id":632380,"paper_uid":"1bebd8f2-c4f7-4b1a-b1ce-3f542e9a26a6","identity_status":"available","lookup_basis":"semantic_scholar_external_id","compatibility_path":"corpus_id"},"url":"https://sah.borca.ai/papers/204499518"}