Managing compliance with privacy regulations through translation guardrails: A health information exchange case study

2023 | Information and Organization | Citations: 0

Authors: Anderson, Chad; Baskerville, Richard; Kaul, Mala

Abstract: Information privacy is increasingly important in our digitally connected world, ... Expand

Abstract: Information privacy is increasingly important in our digitally connected world, particularly in healthcare, and privacy regulations are ramping up to promote appropriate privacy practices. As a digital platform that enables healthcare providers to exchange protected health information (PHI), a health information exchange (HIE) is governed by health information privacy regula­ tions. The challenge for HIEs is to operate in a way that will maximize information exchange while maintaining compliance with regulations that may constrain the sharing of PHI. Regula­ tions impose a measure of universality through compliance requirements, while being flexible to allow adaptation to the local context. However, our longitudinal case study into the privacy policies of an HIE, demonstrates that the journey of privacy ideas from their original formulation in regulations, to their ultimate enactment in an organizational setting, is accompanied by translations, such that the final implementation may vary extensively from its original form. Such variability often results in interpretations that differ from what the regulators intended. Conse­ quently, translation guardrails are necessary to protect against problematic translations of reg­ ulatory ideas which could lead to compliance issues and loss of platform participation. Our findings offer two contributions. First, we contribute to the compliance literature by explaining how guardrails can balance the use of permission and obligation schemas which are necessary to translate regulations into effective organizational policies for the success of HIEs and other in­ formation exchange platforms. Second, we contribute to extending translation theory by explaining how pragmatic reasoning schemas function as the mechanism through which trans­ lation of regulations occurs. Collapse

Topics: privacy information privacy law data security information exchange legal context

Methods: qualitative interview longitudinal research case study longitudinal case study literature study

Theories: organizational behavior theory

Promise not fulfilled: FinTech, data privacy, and the GDPR

2023 | Electronic Markets | Citations: 0

Authors: Dorfleitner, Gregor; Hornuf, Lars; Kreppmeier, Julia

Abstract: This article analyzes how the General Data Protection Regulation (GDPR) has affe ... Expand

Abstract: This article analyzes how the General Data Protection Regulation (GDPR) has affected the privacy practices of FinTech firms. We study the content of 276 privacy statements respectively before and after the GDPR became binding. Using text analysis methods, we find that the readability of the privacy statements has decreased. The texts of privacy statements have become longer and use more standardized language, resulting in worse user comprehension. This calls into question whether the GDPR has achieved its original goal—the protection of natural persons regarding the transparent processing of personal data. We also link the content of the privacy statements to FinTech-specific determinants. Before the GDPR became binding, more external investors and a higher legal capital were related to a higher quantity of data processed and more transparency, but not thereafter. Finally, we document mimicking behavior among FinTech industry peers with regard to the data processed and transparency. Collapse

Topics: legal context General Data Protection Regulation privacy electronic finance website

Methods: parametric test paired t-test descriptive statistic Student's t-test qualitative content analysis

Theories: privacy calculus theory

GDPR Privacy Type Clustering: Motivational Factors for Consumer Data Sharing

2023 | European Conference On Information Systems | Citations: 7

Authors: Hanneke, Björn; Baum, Lorenz; Hinz, Oliver

Abstract: The GDPR introduced restrictive privacy-preserving measures, affecting the dail ... Expand

Abstract: The GDPR introduced restrictive privacy-preserving measures, affecting the daily life of (online) consumers. Moreover, literature shows that privacy preferences are constantly evolving. This is the first study introducing a GDPR exercising-oriented approach to identify consumer privacy types. Based on a representative sample of the German online population, we cluster consumers according to their privacy importance ("intention to act") and GDPR knowledge ("ability to act") and derive four consumer privacy type clusters: fundamentalists, amateurs, pragmatists, and unconcerned. We investigate motivational factors for changing privacy settings and find significant differences between consumers' intentions and actions for selected factors. This provides evidence for the privacy paradox. Contrarily, intentions and actions align for other factors, which supports the hypothesis that actionbased consent might lower the privacy paradox. Finally, we suggest the development of standardized scales and corresponding clustering methodologies for consumer privacy type clustering to increase comparability over time and across populations. Collapse

Topics: privacy legal context General Data Protection Regulation privacy behavior advertising management

Methods: cluster analysis survey archival research k-means clustering survey design

Personalization-Privacy Paradox in Using Mobile Health Services

2023 | European Conference On Information Systems | Citations: 0

Authors: Klossner, Sara; Ghanbari, Hadi; Rossi, Matti; Sarv, Lill

Abstract: The rapid growth of the population and the increase in life expectancy put inte ... Expand

Abstract: The rapid growth of the population and the increase in life expectancy put intense pressure on the healthcare systems worldwide. Mobile health applications (m-health apps) can help ease the situation by offering highly personalized services that empower individuals to take better care of their health. To reach their full potential, m-health apps must continuously gather personal health data from users, which leads to privacy concerns. We study the influence of users' privacy concerns on their intention to disclose personal health data to m-health apps. Using an online survey and conducting SEM-PLS, we show that a personalization-privacy paradox is present in the context of m-health apps. While respondents claim to have privacy concerns about using m-health apps, their concerns do not negatively affect their self-disclosure intentions nor their intention to continue using the apps. Our results show that the magnitude of personalization-privacy paradox is influenced by demographic factors. Collapse

Topics: information privacy concern mobile health mobile application usability personalization

Methods: survey partial least squares path modeling SEM tool survey design partial least squares regression

Data as the New Currency - An Empirical Study Using Conjoint Analysis

2023 | European Conference On Information Systems | Citations: 0

Authors: Krumay, Barbara; Koch, Stefan

Abstract: Since data and information are becoming important factors in competitiveness in ... Expand

Abstract: Since data and information are becoming important factors in competitiveness in the digital age, organisations tend to have an enormous appetite for data. However, users are becoming increasingly reluctant to provide their data without receiving some benefits. Therefore, it is necessary to identify the extent to which consumers are willing to protect their data by paying for the use of a service with money or with data. This study investigates willingness to pay for an online service by examining both money and data as currency (i.e. the users' privacy costs). Furthermore, this study is an empirical investigation that uses conjoint analysis to determine whether different service types show different preferences and which characteristics are decisive. The findings show that the online service used has an impact on whether people pay with money or their data. Collapse

Topics: privacy online banking social media data protection willingness to pay

Methods: survey conjoint analysis descriptive statistic chi squared test archival research

Theories: privacy calculus theory

When and Why Consumers Respond to Online Privacy Violations

2023 | HICSS | Citations: 1

Authors: Tran, Chi; Reich, Brandon; Yuan, Hong

Abstract: As consumer privacy concerns become paramount, it is increasingly critical to un ... Expand

Abstract: As consumer privacy concerns become paramount, it is increasingly critical to understand what constitutes a privacy violation and how consumers respond. Using a multi-method approach, this research shows that consumers perceive three privacy violation types with increasing levels of severity, explaining when and why consumers exhibit seemingly paradoxical responses to different violation types. Our theorizing and findings suggest that resource control is the predominant mechanism driving privacy behavior, and that situation controllability (operationalized as level of variability of privacy practices within the industry) may moderate its effects. ***Disclosure: An earlier version of this work was submitted and accepted to HICSS last year but was later withdrawn as the authors were unable to attend the conference due to extenuating circumstances. Thanks to the reviews provided by the conference committee last year, we were able to revise and update new analyses and studies in our empirical package in this submission. Collapse

Topics: privacy Twitter Facebook data breach privacy behavior

Methods: qualitative content analysis theory development mixed method experiment parametric test

Theories: self determination theory

Passing the Torch: How Parental Privacy Concerns Affect Adolescent Self-Disclosure on Social Networking Sites

2023 | Management Information Systems Quarterly | Citations: 0

Authors: Wang, Jingguo; Dong, Meichen; Yang, Zhiyong; Li, Yuan

Abstract: Drawing upon the literatures in information privacy, developmental psychology, ... Expand

Abstract: Drawing upon the literatures in information privacy, developmental psychology, and family science, this research investigates how parental online privacy concerns can be passed on to adolescents and affect their self-disclosure on social networking sites. We propose that parental privacy concerns decrease adolescents' self-disclosure both directly (i.e., compliance) and indirectly through adolescents ' privacy concerns (i.e., internalization) and that such effects are moderated by parent-child privacy dissonance, parental internet evaluative mediation, and adolescents' gender. To test the research model, we collected matched parent-child data from 726 families in China. The results show the indirect effect of parental privacy concerns on adolescents' self-disclosure via their influence on adolescents' privacy concerns. In addition, parent-child privacy dissonance weakens the effect of adolescents' privacy concerns on selfdisclosure. The extent to which parents employ internet evaluative mediation to guide adolescents' online activities reinforces the effect of parental privacy concerns on adolescents' privacy concerns. Statistical analyses further revealed that the mediating effect of adolescents' privacy concerns is weakened by parent-child privacy dissonance but strengthened by internet evaluative mediation. We also found that parental privacy concerns affect sons and daughters through different paths, especially when parents employ high internet evaluative mediation. Under high internet evaluative mediation, parental privacy concerns affect sons' self-disclosure primarily through an indirect path (via sons' privacy concerns), but influence daughters' self-disclosure both directly and indirectly via daughters' privacy concerns. We conclude by discussing theoretical contributions and practical implications. Collapse

Topics: information privacy concern internet technology privacy Snapchat Instagram

Methods: chi squared test survey statistical hypothesis test descriptive statistic self reported survey

Theories: privacy calculus theory

Information Privacy Behaviors during the COVID-19 Pandemic: Focusing on the Restaurant Context

2023 | Information Systems Frontiers | Citations: 0

Authors: Lee, Eunji; Kim, Jin-young; Kim, Junchul; Koo, Chulmo

Abstract: The acquisition of personal information has been generally accepted in the pande ... Expand

Abstract: The acquisition of personal information has been generally accepted in the pandemic situation as an effective measure to prevent infection, while at the same time raising concerns regarding the infringement of personal privacy. The current study aimed to propose and empirically test a research model for restaurant customers on the disclosure of personal information in a pandemic situation. Privacy calculus theory and institutional theory were applied to theoretically explain the drivers/inhibitors and behavioral responses that affect disclosure of personal information. We verified that the most influential factor on intention to disclose was “perceived benefit”, followed by “government pressure” as another strong predictor. We present theoretical and practical implications for restaurant managers and policy agencies. Collapse

Topics: privacy pandemic data breach smartphone privacy behavior

Methods: survey post-hoc analysis partial least squares path modeling partial least squares regression data transformation

Theories: privacy calculus theory institutional theory cultural dimensions theory protection motivation theory

Effects of Online Crowds on Self-Disclosure Behaviors in Online Reviews: A Multidimensional Examination

2022 | Journal of Management Information Systems | Citations: 0

Authors: Choi, HanByeol Stella; Oh, Wonseok; Kwak, Chanhee; Lee, Junyeong; Lee, Heeseok

Abstract: In online environments (i.e., product review sites in our case), consumers are i ... Expand

Abstract: In online environments (i.e., product review sites in our case), consumers are increasingly interacting and socializing with many "strangers" (i.e., online crowds) as well as sharing personal and product information. Drawing from social norms theory, we examine how the multiple aspects of online crowds affect their self-disclosure behaviors as they provide online reviews and investigate the extent to which prior experience moderates this relationship. Our analysis of data from a leading apparel rental site in the United States uncovers that individuals are inclined to conform to the self-disclosure behaviors of a crowd and divulge more personal information as self-disclosure variance within the group increases. Conversely, individuals are more likely to conceal personal information as a review page becomes crowded. The findings reveal that a reviewer's prior experience of writing a review on the website weakens conformity behavior and reduces the effects of crowdedness. The prior experience also positively interacts with self-disclosure variance in a crowd. Based on these results, we present theoretical implications to literature on social norms and privacy, prior experience, and online reviews. This study also has managerial implications for firms interested in content generation by online reviewers and in review systems where user-generated content is essential. Collapse

Topics: social norm online review data breach website privacy

Methods: computational algorithm descriptive statistic instrumental variables estimation statistical hypothesis test qualitative content analysis

Theories: social influence theory theory of bounded rationality

Social Media Government Surveillance: Government Attributes and Users Privacy

2022 | Americas Conference on Information Systems | Citations: 0

Authors: ELDOH, Mohamed

Abstract: Social media (SM) platforms provide an ideal ground for mass audience targeting ... Expand

Abstract: Social media (SM) platforms provide an ideal ground for mass audience targeting and information exchanges among individuals globally. That said, it is argued that government surveillance is prevailing worldwide and that 56% live in countries where political, social, or religious content was blocked online. Yet little is known on users' beliefs and perceptions towards government surveillance. In this respect, utilizing a sample of SM users, this research-in-progress specifically focuses on how users' perception of government surveillance attributes (credibility, transparency, and fairness) shapes user's beliefs towards government social media surveillance as well as how such perceptions can impact users' privacy attributes and the development for the need for surveillance. The research findings will contribute to the limited academic literature addressing government surveillance as well as expected to provide policymakers and privacy practitioners with insights on SM users beliefs in such context. Collapse

Topics: privacy marketing management privacy behavior information privacy concern social media

Methods: survey literature study survey design

Theories: reactance theory privacy calculus theory