Open AccessConsumer perspectives on information privacy following the implementation of the GDPR
Author(s) -
Wanda Presthus,
Hanne Sørum
Publication year - 2021
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.411
H-Index - 13
ISSN - 2182-7796
DOI - 10.12821/ijispm070302
Subject(s) - general data protection regulation , consumer privacy , information privacy , european union , personally identifiable information , internet privacy , business , norwegian , privacy policy , ftc fair information practice , data protection act 1998 , control (management) , privacy by design , big data , data protection directive , information privacy law , computer security , computer science , european union law , linguistics , philosophy , artificial intelligence , economic policy , operating system
The General Data Protection Regulation (GDPR) was implemented in the European Union and European Economic Area in May 2018. The GDPR aims to strengthen consumers’ rights to data privacy in the wake of technological developments like big data and artificial intelligence. This was a hot topic for stakeholders, such as lawyers, companies and consumers, prior to the GDPR’s implementation. This paper investigates to what extent consumers are concerned about information privacy issues following the implementation of the GDPR. We present findings from an online survey conducted during spring 2019 among 327 Norwegian consumers, as well as findings from a survey conducted immediately prior to the implementation of the GDPR in spring 2018. We draw the following conclusions: (1) consumers gained significant knowledge about their information privacy from the GDPR, but felt relatively little need to execute their enhanced rights; (2) about 50% of respondents believed themselves to have control over their data, while almost 40% stated that they had no control about their personal data; and (3) consumers largely trusted companies to manage their personal data. These insights are of interest to both academia and to industries that deal with personal data.