IDEAS home Printed from https://ideas.repec.org/a/spr/futbus/v9y2023i1d10.1186_s43093-023-00285-2.html
   My bibliography  Save this article

Exploring the General Data Protection Regulation (GDPR) compliance in cloud services: insights from Swedish public organizations on privacy compliance

Author

Listed:
  • Awatef Issaoui

    (Örebro University School of Business)

  • Jenny Örtensjö

    (Örebro University School of Business)

  • M. Sirajul Islam

    (Örebro University School of Business
    Alfaisal University)

Abstract

The adoption of cloud services offers manifold advantages to public organizations; however, ensuring data privacy during data transfers has become increasingly complex since the inception of the General Data Protection Regulation (GDPR). This study investigates privacy concerns experienced by public organizations in Sweden, focusing on GDPR compliance. A qualitative interpretative approach was adopted, involving semi-structured interviews with seven employees from five public organizations in Sweden. Additionally, secondary data were gathered through an extensive literature review. The collected data were analyzed and classified using the seven privacy threat categories outlined in the LINDDUN framework. The key findings reveal several significant privacy issues when utilizing public cloud services, including unauthorized access, loss of confidentiality, lack of awareness, lack of trust, legal uncertainties, regulatory challenges, and loss of control. The study underscores the importance of implementing measures such as anonymization, pseudonymization, encryption, contractual agreements, and well-defined routines to ensure GDPR compliance. The findings emphasize the importance of implementing measures such as anonymization, pseudonymization, encryption, contractual agreements, and well-defined routines to ensure GDPR compliance. Furthermore, this research highlights the critical aspect of digital sovereignty in addressing privacy challenges associated with public cloud service adoption by public organizations in Sweden.

Suggested Citation

  • Awatef Issaoui & Jenny Örtensjö & M. Sirajul Islam, 2023. "Exploring the General Data Protection Regulation (GDPR) compliance in cloud services: insights from Swedish public organizations on privacy compliance," Future Business Journal, Springer, vol. 9(1), pages 1-13, December.
    • Handle: RePEc:spr:futbus:v:9:y:2023:i:1:d:10.1186_s43093-023-00285-2
    DOI: 10.1186/s43093-023-00285-2
    as

    Download full text from publisher

    File URL: http://link.springer.com/10.1186/s43093-023-00285-2
    File Function: Abstract
    Download Restriction: Access to the full text of the articles in this series is restricted.
    File URL: https://libkey.io/10.1186/s43093-023-00285-2?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    References listed on IDEAS

    as
    1. Jaatun, Martin Gilje & Pearson, Siani & Gittler, Frédéric & Leenes, Ronald & Niezen, Maartje, 2020. "Enhancing accountability in the cloud," International Journal of Information Management, Elsevier, vol. 53(C).
    2. He Li & Lu Yu & Wu He, 2019. "The Impact of GDPR on Global Technology Development," Journal of Global Information Technology Management, Taylor & Francis Journals, vol. 22(1), pages 1-6, January.
    Full references (including those not matched with items on IDEAS)

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Gajendra Liyanaarachchi & Giampaolo Viglia & Fidan Kurtaliqi, 2024. "Addressing challenges of digital transformation with modified blockchain," Post-Print hal-04440365, HAL.
    2. Anjuli Franz & Alexander Benlian, 2022. "Exploring interdependent privacy – Empirical insights into users’ protection of others’ privacy on online platforms," Electronic Markets, Springer;IIM University of St. Gallen, vol. 32(4), pages 2293-2309, December.
    3. Claire M. Segijn & Joanna Strycharz & Amy Riegelman & Cody Hennesy, 2021. "A Literature Review of Personalization Transparency and Control: Introducing the Transparency–Awareness–Control Framework," Media and Communication, Cogitatio Press, vol. 9(4), pages 120-133.
    4. Jongheon Kim, 2023. "Traveling AI‐essentialism and national AI strategies: A comparison between South Korea and France," Review of Policy Research, Policy Studies Organization, vol. 40(5), pages 705-728, September.
    5. Yixin Sun & Hoekyung Jung, 2024. "Machine Learning (ML) Modeling, IoT, and Optimizing Organizational Operations through Integrated Strategies: The Role of Technology and Human Resource Management," Sustainability, MDPI, vol. 16(16), pages 1-27, August.
    6. Barr-Kumarakulasinghe Cheryl & Boon-Kwee Ng, 2022. "Protecting the Unprotected Consumer Data in Internet of Things: Current Scenario of Data Governance in Malaysia," Sustainability, MDPI, vol. 14(16), pages 1-25, August.
    7. Mauro Luis Gotsch & Marcus Schögel, 2023. "Addressing the privacy paradox on the organizational level: review and future directions," Management Review Quarterly, Springer, vol. 73(1), pages 263-296, February.
    8. Ibrahim A. Adekunle & Olumuyiwa G. Yinusa & Tolulope O. Williams & Rahmon A. Folami, 2021. "On the Determinant of Financial Development in Africa: Geography, Institutions and Macroeconomic Policy Relevance," Research Africa Network Working Papers 21/054, Research Africa Network (RAN).
    9. Idil ATASU & Aslıhan NASIR & Hande TURKER, 2021. "What is Important for Consumers in Wearable Medical Device (WMD) Usage Intention?," Journal of Emerging Trends in Marketing and Management, The Bucharest University of Economic Studies, vol. 1(1), pages 40-48, August.
    10. Tahal Radek & Formánek Tomáš, 2020. "Reflection of GDPR by the Czech Population," Management & Marketing, Sciendo, vol. 15(1), pages 78-94, March.
    11. Gregor Dorfleitner & Lars Hornuf & Julia Kreppmeier, 2021. "Promise not Fulfilled: FinTech Data Privacy, and the GDPR," CESifo Working Paper Series 9359, CESifo.
    12. Wu, Chao, 2024. "Data privacy: From transparency to fairness," Technology in Society, Elsevier, vol. 76(C).
    13. Alan A. Ahi & Noemi Sinkovics & Rudolf R. Sinkovics, 2023. "E-commerce Policy and the Global Economy: A Path to More Inclusive Development?," Management International Review, Springer, vol. 63(1), pages 27-56, February.
    14. Claire M. Segijn & Joanna Strycharz & Amy Riegelman & Cody Hennesy, 2021. "A Literature Review of Personalization Transparency and Control: Introducing the Transparency–Awareness–Control Framework," Media and Communication, Cogitatio Press, vol. 9(4), pages 120-133.
    15. Johannes Pecher & Emmanuel Syrmoudis & Jens Grossklags, 2024. "Service selection and switching decisions: user behavior in high-interoperability environments," Palgrave Communications, Palgrave Macmillan, vol. 11(1), pages 1-14, December.
    16. Andersdotter, Amelia & Olejnik, Lukasz, 2021. "Policy strategies for value-based technology standards," Internet Policy Review: Journal on Internet Regulation, Alexander von Humboldt Institute for Internet and Society (HIIG), Berlin, vol. 10(3), pages 1-26.
    17. Garrett A. Johnson, 2022. "Economic Research on Privacy Regulation: Lessons from the GDPR and Beyond," NBER Chapters, in: The Economics of Privacy, National Bureau of Economic Research, Inc.
    18. Gregor Dorfleitner & Lars Hornuf & Julia Kreppmeier, 2023. "Promise not fulfilled: FinTech, data privacy, and the GDPR," Electronic Markets, Springer;IIM University of St. Gallen, vol. 33(1), pages 1-29, December.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:spr:futbus:v:9:y:2023:i:1:d:10.1186_s43093-023-00285-2. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Sonal Shukla or Springer Nature Abstracting and Indexing (email available below). General contact details of provider: http://www.springer.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.