Assessment of Compliance of GDPR in IT Industry and Fintech

Understanding challenges of GDPR implementation in business enterprises: a systematic literature review

“…Only a few studies examined industry sectors and country contexts. Notably, technology-related industries, such as the IT sector (Pathak et al , 2023; Poritskiy et al , 2019), Fintech (Pathak et al , 2023), software engineering (Leite et al , 2022) and the industrial sector (Freitas and Mira da Silva, 2018), were common subjects of investigation. Regarding geographical dispersion, the dominant countries in the reviewed studies were Germany (Härting et al , 2020; Härting et al , 2021) and Portugal (Freitas and Mira da Silva, 2018; Leite et al , 2022; Poritskiy et al , 2019), indicating that GDPR implementation might be perceived as a complex issue in these economies.…”

“…Additionally, Härting et al (2021) used surveys, while Leite et al (2022) conducted a comprehensive case analysis of two SMEs and two micro companies to delve into the GDPR implementation challenges. At the same time, a study conducted by Pathak et al (2023) exemplified the use of a mixed methods approach. Their research incorporated both qualitative and quantitative tools, leveraging 25 survey responses from IT services and Fintech industry professionals to gain a deeper understanding of the challenges.…”

“…While some studies used qualitative and quantitative methods (e.g. Leite et al, 2022;Mangini et al, 2020;Pathak et al, 2023), the overall diversity of research methodologies was limited. Therefore, we suggest that more empirical research, such as involving a mixed-methods approach (Härting et al, 2020), is needed to derive quantitatively comparable results and capture the full complexity of the challenges faced by organisations (Martínez-Martínez, 2018;Saniei, 2021;Sirur et al, 2018;Teixeira et al, 2019;Zaman and Hassani, 2019).…”

“…Prior research has shed light on various aspects of GDPR compliance (e.g. de Carvalho et al, 2020;Mangini et al, 2020;Pathak et al, 2023;Politou et al, 2018); however, there remains a need to consolidate and synthesise the available literature to gain a comprehensive understanding of the challenges encountered by organisations (Teixeira et al, 2019). This study seeks to address this gap by conducting a systematic review of the existing literature to understand the factors influencing the ability of organisations to implement the regulation effectively and putting forth the following research questions:…”

“…De Carvalho et al (2020),Kutyłowski et al (2020),Mangini et al (2020),Marotta and Madnick (2021),Pathak et al (2023),Politou et al (2018) andZaman and Hassani (et al (2021),Mangini et al (2020),Marotta and Madnick (2021), Martínez-Martínez (2018), Pathak et al Lack of knowledge, expertise and experience Härting et al (2020), Härting et al (2021), Poritskiy et al (2019) and Teixeira et al De Carvalho et al (2020), Freitas and Mira da Silva (2018), Härting et al (2020), Härting et al (2021), Mangini et al (2020), Marotta and Madnick (2021), Sirur et al (2018) and Teixeira et al (2019) Process adaptation Adaptation of internal processes Establishing new procedures De Carvalho et al (2020), Härting et al (2020), Härting et al (2021), Kutyłowski et al (2020), Leite et al (2022), Poritskiy et al (2019), Politou et al (2018), Sirur et al (2018) and Zaman and Hassani (2019) Corporate governance Resistance to change, culture of privacy, systems/policy change, risk management models Martínez-Martínez (2018), Pathak et al (2023), Poritskiy et al (2019) and Teixeira et al Carvalho et al (2020), Leite et al (2022), Pathak et al (2023) and Politou et al et al (2020), Freitas and Mira da Silva (2018), Mangini et al (2020), Marotta and Madnick (2021), Pathak et al (2023), Sirur et al (2018), Saniei (2021) and Teixeira et al (2019) Insufficient government support Incomplete or vague guidelines and little support from authorities Härting et al (2020), Härting et al (2021), Sirur et al (2018) and Teixeira et al (2019)…”