TY - CHAP

T1 - Unraveling Privacy Concerns in Complex Data Ecosystems with Architectural Thinking

AU - Burmeister, Fabian

AU - Kurtz, Christian

AU - Vogel, Pascal

AU - Drews, Paul

AU - Schirmer, Ingrid

N1 - Conference code: 42

PY - 2021

Y1 - 2021

N2 - Privacy violations increasingly result from personal-data processing by a convoluted set of actors that collaborate in complex data ecosystems. These data ecosystems comprise numerous socio-technical elements and relations, and their opacity often obscures the manifold reasons for privacy violations. Therefore, researchers and practitioners call for systematic approaches that allow for decomposing data ecosystems in order to receive transparency about the opaque data flows and processing mechanisms across actors. This paper positions architectural thinking as a reasonable means for this need. By collecting key privacy concerns of business and regulatory stakeholders and developing a corresponding data ecosystem architecture meta-model, we provide first steps for extending the scope of architectural thinking to the privacy context. Our results are based on a mixed methods approach, which triangulates data received from a multiple case study of privacy scandals and from 14 expert interviews.

AB - Privacy violations increasingly result from personal-data processing by a convoluted set of actors that collaborate in complex data ecosystems. These data ecosystems comprise numerous socio-technical elements and relations, and their opacity often obscures the manifold reasons for privacy violations. Therefore, researchers and practitioners call for systematic approaches that allow for decomposing data ecosystems in order to receive transparency about the opaque data flows and processing mechanisms across actors. This paper positions architectural thinking as a reasonable means for this need. By collecting key privacy concerns of business and regulatory stakeholders and developing a corresponding data ecosystem architecture meta-model, we provide first steps for extending the scope of architectural thinking to the privacy context. Our results are based on a mixed methods approach, which triangulates data received from a multiple case study of privacy scandals and from 14 expert interviews.

KW - Informatics

KW - Business informatics

M3 - Article in conference proceedings

BT - ICIS 2021 Proceedings

PB - Association for Information Systems

T2 - 42nd International Conference on Information Systems - ICIS 2021 TREOs

Y2 - 12 December 2021 through 15 December 2021

ER -