EU General Data Protection Regulation Implementation: An Institutional Theory View Book Conference Paper uri icon


  • Information and communication technologies have been evolving rapidly, providing more and more alternative ways of accessing information, accessible through multiple paths and devices, transforming IoT into a giant digital system. This heterogeneous diversity ecosystem allows travel to the CrowdSensing era. Information in its role of reducing uncertainty is responsible for finding ways and shortcuts that increase efficiency and reduce the waste of time in the decision-making process. The massive spread of IoT devices has led to CrowdSensing, a sensor-based ecosystem of many different formats and technologies, in which information created by sensors is essential for decisionmaking processes and for improving business process efficiency. Service providers are beginning to design new business models that consider the smart things scenario, providing sensing as a service (SaaS). This article aims to provide insight into the Mobile CrowdSensing application environment by focusing on issues related to privacy of participant.
  • The General Data Protection Regulation entered into force on 25 May 2018, but was approved on 27 April 2016. The General Data Protection Regulation (GDPR) aims to ensure the coherence of natural persons’ protection within the European Union (EU), comprising very important innovative rules that will be applied across the EU and will directly affect every Member State. The organizations/Institutions had two years to implement it. Despite this, it has been observed that, in several sectors of activity, the number of organi-zations having adopted that control is low. This study aimed to identify the factors which condition the implementation the GDPR by organizations. Methodologically, the study involved interviewing the officials in charge of information systems in 18 health clinics in Portugal. The factors facilitating and inhibiting the implementation of GDPR are presented and discussed. Based on these factors, a set of recommendations to enhance the implemen-tation of the measures proposed by the regulation is made. The study used Institutional Theory as a theoretical framework. The results are discussed in light of the data collected in the survey and possible future works are identi-fied.

publication date

  • 2019