Exploring the General Data Protection Regulation (GDPR) compliance in cloud services: insights from Swedish public organizations on privacy compliance
Abstract The adoption of cloud services offers manifold advantages to public organizations; however, ensuring data privacy during data transfers has become increasingly complex since the inception of the General Data Protection Regulation (GDPR). This study investigates privacy concerns experienced...
Saved in:
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
SpringerOpen
2023-12-01
|
| Series: | Future Business Journal |
| Subjects: | |
| Online Access: | https://doi.org/10.1186/s43093-023-00285-2 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1850251721442328576 |
|---|---|
| author | Awatef Issaoui Jenny Örtensjö M. Sirajul Islam |
| author_facet | Awatef Issaoui Jenny Örtensjö M. Sirajul Islam |
| author_sort | Awatef Issaoui |
| collection | DOAJ |
| description | Abstract The adoption of cloud services offers manifold advantages to public organizations; however, ensuring data privacy during data transfers has become increasingly complex since the inception of the General Data Protection Regulation (GDPR). This study investigates privacy concerns experienced by public organizations in Sweden, focusing on GDPR compliance. A qualitative interpretative approach was adopted, involving semi-structured interviews with seven employees from five public organizations in Sweden. Additionally, secondary data were gathered through an extensive literature review. The collected data were analyzed and classified using the seven privacy threat categories outlined in the LINDDUN framework. The key findings reveal several significant privacy issues when utilizing public cloud services, including unauthorized access, loss of confidentiality, lack of awareness, lack of trust, legal uncertainties, regulatory challenges, and loss of control. The study underscores the importance of implementing measures such as anonymization, pseudonymization, encryption, contractual agreements, and well-defined routines to ensure GDPR compliance. The findings emphasize the importance of implementing measures such as anonymization, pseudonymization, encryption, contractual agreements, and well-defined routines to ensure GDPR compliance. Furthermore, this research highlights the critical aspect of digital sovereignty in addressing privacy challenges associated with public cloud service adoption by public organizations in Sweden. |
| format | Article |
| id | doaj-art-3159b7d47dc44c0081ef7bdd7ee55569 |
| institution | OA Journals |
| issn | 2314-7210 |
| language | English |
| publishDate | 2023-12-01 |
| publisher | SpringerOpen |
| record_format | Article |
| series | Future Business Journal |
| spelling | doaj-art-3159b7d47dc44c0081ef7bdd7ee555692025-08-20T01:57:51ZengSpringerOpenFuture Business Journal2314-72102023-12-019111310.1186/s43093-023-00285-2Exploring the General Data Protection Regulation (GDPR) compliance in cloud services: insights from Swedish public organizations on privacy complianceAwatef Issaoui0Jenny Örtensjö1M. Sirajul Islam2Örebro University School of BusinessÖrebro University School of BusinessÖrebro University School of BusinessAbstract The adoption of cloud services offers manifold advantages to public organizations; however, ensuring data privacy during data transfers has become increasingly complex since the inception of the General Data Protection Regulation (GDPR). This study investigates privacy concerns experienced by public organizations in Sweden, focusing on GDPR compliance. A qualitative interpretative approach was adopted, involving semi-structured interviews with seven employees from five public organizations in Sweden. Additionally, secondary data were gathered through an extensive literature review. The collected data were analyzed and classified using the seven privacy threat categories outlined in the LINDDUN framework. The key findings reveal several significant privacy issues when utilizing public cloud services, including unauthorized access, loss of confidentiality, lack of awareness, lack of trust, legal uncertainties, regulatory challenges, and loss of control. The study underscores the importance of implementing measures such as anonymization, pseudonymization, encryption, contractual agreements, and well-defined routines to ensure GDPR compliance. The findings emphasize the importance of implementing measures such as anonymization, pseudonymization, encryption, contractual agreements, and well-defined routines to ensure GDPR compliance. Furthermore, this research highlights the critical aspect of digital sovereignty in addressing privacy challenges associated with public cloud service adoption by public organizations in Sweden.https://doi.org/10.1186/s43093-023-00285-2Public cloudGDPRPublic organizationsLINDDUNInformation privacySweden |
| spellingShingle | Awatef Issaoui Jenny Örtensjö M. Sirajul Islam Exploring the General Data Protection Regulation (GDPR) compliance in cloud services: insights from Swedish public organizations on privacy compliance Future Business Journal Public cloud GDPR Public organizations LINDDUN Information privacy Sweden |
| title | Exploring the General Data Protection Regulation (GDPR) compliance in cloud services: insights from Swedish public organizations on privacy compliance |
| title_full | Exploring the General Data Protection Regulation (GDPR) compliance in cloud services: insights from Swedish public organizations on privacy compliance |
| title_fullStr | Exploring the General Data Protection Regulation (GDPR) compliance in cloud services: insights from Swedish public organizations on privacy compliance |
| title_full_unstemmed | Exploring the General Data Protection Regulation (GDPR) compliance in cloud services: insights from Swedish public organizations on privacy compliance |
| title_short | Exploring the General Data Protection Regulation (GDPR) compliance in cloud services: insights from Swedish public organizations on privacy compliance |
| title_sort | exploring the general data protection regulation gdpr compliance in cloud services insights from swedish public organizations on privacy compliance |
| topic | Public cloud GDPR Public organizations LINDDUN Information privacy Sweden |
| url | https://doi.org/10.1186/s43093-023-00285-2 |
| work_keys_str_mv | AT awatefissaoui exploringthegeneraldataprotectionregulationgdprcomplianceincloudservicesinsightsfromswedishpublicorganizationsonprivacycompliance AT jennyortensjo exploringthegeneraldataprotectionregulationgdprcomplianceincloudservicesinsightsfromswedishpublicorganizationsonprivacycompliance AT msirajulislam exploringthegeneraldataprotectionregulationgdprcomplianceincloudservicesinsightsfromswedishpublicorganizationsonprivacycompliance |