A study on developing framework for information privacy protection

Abstract

Although information privacy is one of the biggest issues in the enterprises, privacy incidents are relatively increasing because most companies concern privacy protection as a short term project not like an essential factor which needs to be considered consistently. IP3 (information privacy protection program) means that the program should be conducted continuously as a background program in enterprises. If the operation or design of privacy protection is inappropriately implemented in an enterprise, they must pay for the failure of information privacy protection because it is closely relative to customer and their trust toward the enterprise. Therefore, appropriate information privacy protection program is required to prevent enterprise from loss of trust. This study intends to analyze the topic of information privacy and proposes an information privacy program framework. The framework consists of 4 domains, 18 indicators and 59 metrics to cover the necessary components of the information privacy program. The proposed framework for information privacy protection program is pilot tested to identify the strength; it is measured by proposed indicators to realize a real condition and feasible object of information privacy protection program framework. The results are positive in terms of their materiality and feasibility by conducting focus group interviews with five privacy managers. © 2017 ICIC International.