Abstract

Data privacy concerns in organizations have been rising over the past several decades. As per the GDPR (General Data Protection Regulation), organizations need to implement highest possible privacy settings by design and default. This study develops a model for understanding the mechanisms of information privacy assimilation in Information Technology (IT) organizations. This study treats information privacy as a distinct dimension separate from information security. We have examined the mediating role of senior management participation and organizational culture on privacy assimilation (strategy and organizational activities). On the strategy, our findings showed that full mediating role of senior management participation for coercive forces, partial mediation for normative and mimetic forces. On the organizational activities, our findings showed that full mediating role of organizational culture for coercive forces and normative forces, partial mediation for mimetic forces. These findings would enable senior managers to identify and respond to institutional pressures by focusing on appropriate factors within the organization.

Share

COinS