An Analytical Review of Industrial Privacy Frameworks and Regulations for Organisational Data Sharing

Abstract

This study examines the privacy protection challenges in data sharing between organisations and third-party entities, focusing on changing collaborations in the digital age. Utilising a mixed-method approach, we categorise data-sharing practices into three business models, each with unique privacy concerns. The research reviews legal regulations like the General Data Protection Regulation (GDPR), highlighting their emphasis on user privacy protection but noting a lack of specific technical guidance. In contrast, industrial privacy frameworks such as NIST and Five Safes are explored for their comprehensive procedural and technical guidance, bridging the gap between legal mandates and practical applications. A key component of this study is the analysis of the Facebook–Cambridge Analytica data breach, which illustrates the significant privacy violations and their wider implications. This case study demonstrates how the principles of the NIST and Five Safes frameworks can effectively mitigate privacy risks, enhancing transparency and accountability in data sharing. Our findings highlight the dynamic nature of data sharing and the vital role of both privacy regulations and industry-specific frameworks in protecting individual privacy rights. This study contributes insights into the development of robust privacy strategies, highlighting the necessity of integrating comprehensive privacy frameworks into organisational practices for improved decision making, operational efficiency, and privacy protection in collaborative data environments.

Data privacy and security challenges in environmental research: Approaches to safeguarding sensitive information

“…As we navigate through the digital age, the proliferation of data sharing between organizations and third-party entities has introduced a complex array of privacy protection challenges. Ghorashi et al (2023) provide an insightful analysis into the industrial privacy frameworks and regulations governing organizational data sharing. They highlight the General Data Protection Regulation (GDPR) for its emphasis on user privacy protection but note its lack of specific technical guidance for practical application.…”

“…The dynamic nature of data sharing, coupled with the rapid advancement of technology, demands a proactive approach to developing robust privacy strategies. Integrating comprehensive privacy frameworks, such as those suggested by Ghorashi et al (2023), into organizational practices is paramount for enhancing decision-making, operational efficiency, and privacy protection.…”

“…Moreover, the principles of transparency and accountability must be at the forefront of any data sharing and protection strategy, ensuring that environmental research can continue to thrive without compromising individual privacy rights. The studies by Ghorashi et al (2023), Sun (2023), and Wylde et al (2022) collectively underscore the complexities and challenges of ensuring data privacy and security in environmental research. They highlight the necessity for a holistic view that integrates legal, technological, and ethical frameworks to address the identified gaps.…”