Understanding Data Protection Regulations from a Data Management Perspective: A Capability-Based Approach to EU-GDPR

Details

Ressource 1Download: Understanding Data Protection Regulations from a Data Management.pdf (400.33 [Ko])
State: Public
Version: Final published version
License: Not specified
Serval ID
serval:BIB_65AAB323C49C
Type
Inproceedings: an article in a conference proceedings.
Collection
Publications
Institution
Title
Understanding Data Protection Regulations from a Data Management Perspective: A Capability-Based Approach to EU-GDPR
Title of the conference
Proceedings of the 14th International Conference on Wirtschaftsinformatik (2019)
Author(s)
Labadie Clement, Legner Christine
Publication state
Published
Issued date
24/02/2019
Peer-reviewed
Oui
Language
english
Abstract
The European General Data Protection Regulation (EU-GDPR) has entered into force in May 2018. Its emphasis on individual control and organizational accountability constitutes a new paradigm that requires changes in the way organizations manage personal data. However, organizations face difficulties when implementing EU-GDPR due to a lack of common ground between legal and data management domains. Anchored in the resource-based view theory (RBV), this paper argues that the regulation requires companies to build a dedicated data management capability. It presents a capability model that was developed in an iterative design science process, integrating both interpretation of legal texts and practical insights from focus groups with more than 30 experts and from 3 EU-GDPR projects. The paper advances the regulatory compliance management literature by translating legal data protection concepts for the IS community. It also contributes to practice by enabling organization to set-up systematic approaches towards EU-GDPR compliance.
Keywords
EU-GDPR, Data Protection, Regulations, Compliance, Capabilities
Funding(s)
Other / Competence Center Corporate Data Quality (CC CDQ)
Create date
16/04/2020 22:28
Last modification date
17/04/2020 6:09
Usage data