Towards the development of an information privacy protection awareness inititiative for data subjects and organizations

摘要

Technology has transformed the manner whereby users and organizations conduct their daily activities facilitating high levels of convenience for both users and organizations alike. Unfortunately, many users and organizations are oblivious that the convenience and accessibility of technology may come at a detrimental expense to their privacy. The collection and dissemination of user’s privacy can manifest in identity theft and financial deception for users. For organizations, trust, reputation, and loyalty are compromised if personal information of users is mismanaged. A highly publicized data breach may not only yield regulatory penalties but may trigger lawsuits or generate destructive publicity that can compromise a promising business. This study aspires to propagate information privacy protection awareness for users and organizations by means of documenting the essential factors of information privacy protection awareness in terms of the rationale for information privacy protection, privacy environment, information privacy protection measures/program, responsibility for information privacy protection, and consequences of a privacy breach. The objective of this exercise is to develop a theoretical base for the development of an information privacy protection awareness initiative and to illustrate that both users and organizations despite having different approaches to information privacy protection should assume full responsibility thereof to evade the impact of a privacy breach.