Data Privacy Compliance Benefits for Organisations – A Cyber-Physical Systems and Internet of Things Study

Abstract

The protection of people's privacy is both a legal requirement and a key factor for doing business in many jurisdictions. Organisations thus have a legal obligation to get their privacy compliance in order as a matter of business importance. This applies not only to organisations' day-to-day business operations, but also to the information technology systems they use, develop or deploy. However, privacy compliance, like any other legal compliance requirements, is often seen as an extra burden that is both unnecessary and costly. Such a view of compliance can result in negative consequences and lost opportunities for organisations. This paper seeks to position data privacy compliance as a value proposition for organisations by focusing on the benefits that can be derived from data privacy compliance as it applies to a particular subset of information technology systems, namely cyber-physical systems and Internet of Things technologies. A baseline list of data privacy compliance benefits, contextualised for CPSs and IoT with the South African legal landscape is proposed.

Privacy in the Internet of Things: Where do We Stand? A Systematic Literature Review

“…[159] [144]- [149]. To ensure IoT providers are in compliance with the South African Protection of Personal Information Act (POPI Act) [159], Baloyi et al [111], [144] recommend a list of privacy compliance guidelines. Their methodology includes five iterative phases.…”

“…Second, the approach has not been evaluated to assess its effectiveness. Third, similar to [144], the research mainly focuses on one single regulation and not consider multi-jurisdictional compliance.…”

State Space Explosion Mitigation for Large-Scale Attack and Compliance Graphs Using Synchronous Exploit Firing

“…Compliance graphs can be especially useful for cyber-physical systems, where a greater need for compliance exists. As the authors of [9], [10], [11] discuss, cyber-physical systems have seen greater usage, especially in areas such as critical infrastructure and IoT. The challenge of cyber-physical systems lies not only in the demand for cybersecurity of these systems, but also the concern for safe, stable, and undamaged equipment.…”