Data protection and tech startups
The need for attention, support, and scrutiny
Bibliographic Data
| ID | 21837667 |
|---|---|
| Authors | Chris Norval (0000-0002-4331-7863, University of Cambridge, corresponding author), Heleen Janssen (0000-0002-9443-0786, Compliant and Accountable Systems Group, Department of Computer Science and Technology University of Cambridge Cambridge UK), Heleen L Janssen (0000-0002-2785-5741, University of Cambridge), Jennifer Cobbe (0000-0001-8912-4760, University of Cambridge), Jatinder Singh (0000-0003-0885-6826, University of Cambridge) |
| Year | 2021 |
| Volume | 13 |
| Issue | 2 |
| Pages | 278-299 |
| Publication date | 2021-06-01 |
| Open Access | Yes |
| Type | ARTICLE |
| Venue | Policy & Internet (JOURNAL) |
| Journal identifiers | ISSN: 1944-2866 • E-ISSN: 1944-2866 |
| Publisher | Wiley (PUBLISHER • GB) |
| DOI | 10.1002/poi3.255 |
| OpenAlex | W3160992916 |
| Language | EN |
| Citations received | 1 |
| References cited | 15 |
Though discussions of data protection have focused on the larger, more established organisations, startups also warrant attention. This is particularly so for tech startups, who are often innovating at the ‘cutting‐edge’—pushing the boundaries of technologies that typically lack established data protection best‐practices. Initial decisions taken by startups could well have long‐term impacts, and their actions may inform (for better or for worse) how particular technologies and the applications they support are implemented, deployed, and perceived for years to come. Ensuring that the innovations and practices of tech startups are sound, appropriate and acceptable should therefore be a high priority. This paper explores the attitudes and preparedness of tech startups to issues of data protection. We interviewed a series of UK‐based emerging tech startups as the EU's General Data Protection Regulation (GDPR) came into effect, which revealed areas in which there is a disconnect between the approaches of the startups and the nature and requirements of the GDPR. We discuss the misconceptions and associated risks facing innovative tech startups and offer a number of considerations for the firms and supervisory authorities alike. In light of our discussions, and given what is at stake, we argue that more needs to be done to help ensure that emerging technologies and the practices of the companies that operate them better align with the regulatory obligations. We conclude that tech startups warrant increased attention, support, and scrutiny to raise the standard of data protection for the benefit of us all
Business · Computer security · Data Protection Act 1998 · Economics · Emerging technologies · High tech · Management · Political science · Preparedness · Public relations · Scrutiny · Warrant · Computer Science · Ethics and Social Impacts of AI · Law · Law, AI, and Intellectual Property · Privacy, Security, and Data Protection · Finance · Marketing
| Citations per year | 0.25 |
|---|---|
| Citation span | 2022 - 2022 (1) |
| Highly cited | No |