nach oben

Erschienen in:

2025 | OriginalPaper | Buchkapitel

Privacy Policies on Websites: A Case Study in the Financial Industry in South Africa

verfasst von : Alisa Dayanand, Adéle da Veiga

Erschienen in: Human Aspects of Information Security and Assurance

Verlag: Springer Nature Switzerland

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config

KI-gestützte Suche

Aus

Abstract

Financial companies handle clients’ personal data and outline the related data processing conditions in online privacy policies. Despite data privacy laws, legislative guidelines for these policies are lacking. This research aimed to address the current state of online privacy policies, firstly by proposing holistic criteria for what must be included in a website privacy policy. Thereafter, a case study methodology was applied to review online privacy policies in the financial industry in South Africa, applying the proposed criteria. The key findings of this research indicate that financial companies do not fully address the criteria relating to the data subject's choice and consent, the integrity and security of the data, enforcement and redress, and any further information transfer that may occur in terms of their online privacy policies. The proposed criteria offer value to financial companies by providing a measure by which to assess their online privacy policy content.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Vorheriges Kapitel Harnessing the Right Talent for SETA Programs: Cybersecurity Roles and Competencies that Make a Difference

Nächstes Kapitel Analysing Websites Privacy Policies: A Study of E-commerce Websites in South Africa

Alhomod, S.M., Shafi, M.M.: Privacy policy in E-government websites: a case study of Saudi Arabia. Comput. Inf. Sci. 5(2), 88–93 (2012). https://doi.org/10.5539/cis.v5n2p88CrossRef

Chang, Y., Wong, S.F., Libaque-Saenz, C.F., Lee, H.: The role of privacy policy on consumers’ perceived privacy. Gov. Inf. Q. 35(3), 445–459 (2018). https://doi.org/10.1016/J.GIQ.2018.04.002CrossRef

Anthonysamy, P., Rashid, A., Chitchyan, R.: Privacy requirements: present & future. In: Proceedings - 2017 IEEE/ACM 39th International Conference on Software Engineering: Software Engineering in Society Track, ICSE-SEIS 2017, pp 13–22. Institute of Electrical and Electronics Engineers Inc. (2017)

Schaub, F., Balebako, R., Durity, A.L., Cranor, L.F.: A design space for effective privacy notices. In: 2015 Symposium on Usable Privacy and Security (SOUPS), Ottawa, Canada, pp. 3–14 (2015)

Sutherland, E.: Governance of cybersecurity - The case of South Africa. Afr. J. Inf. Commun. (AJIC) 20(20), 83–112 (2017). https://doi.org/10.23962/10539/23574CrossRef

Javed, Y., Salehin, K.M., Shehab, M.: A Study of South Asian websites on privacy compliance. IEEE Access 8, 156067–156083 (2020). https://doi.org/10.1109/ACCESS.2020.3019334CrossRef

Chua, H.N., Herbland, A., Wong, S.F., Chang, Y.: Compliance to personal data protection principles: a study of how organizations frame privacy policy notices. Telematics Inf. 34(4), 157–170 (2017). https://doi.org/10.1016/j.tele.2017.01.008CrossRef

Adams, R., et al.: POPIA code of conduct for research (with corrigendum). South Afr. J. Sci. 117(5/6), 1–12 (2021). https://doi.org/10.17159/sajs.2021/10933CrossRef

Ching, M.R.D., Fabito, B.S., Celis, N.J.: Data privacy act of 2012: a case study approach to philippine government agencies compliance. Adv. Sci. Lett. 24(10), 7042–7046 (2018). https://doi.org/10.1166/ASL.2018.12404CrossRef

10.

Li, H., Yu, L., He, W.: The impact of GDPR on global technology development. J. Glob. Inf. Technol. Manag. 22(1), 1–6 (2019). 101080/1097198X2019156918622:1–6

11.

Makulilo, A.B.: Privacy and data protection in Africa: a state of the art. Int. Data Priv. Law 2(3), 163–178 (2012). https://doi.org/10.1093/IDPL/IPS014CrossRef

12.

Schwartz, P.M., Peifer, K.-N.: Transatlantic data privacy law. Georgetown Law J. 106, 115–179 (2017)

13.

Protection of Personal Information Act (POPI Act) – POPIA (2013). https://popia.co.za/. Accessed 10 Oct 2023

14.

Oussayef, K.Z.: Selective privacy: facilitating market-based solutions to data breaches by standardizing internet privacy policies. Boston Univ. J. Sci. Technol. Law 14, 104–131 (2008)

15.

Earp, J.B., Antón, A.I., Aiman-Smith, L., Stufflebeam, W.H.: Examining Internet privacy policies within the context of user privacy values. IEEE Trans. Eng. Manag. 52(2), 227–237 (2005). https://doi.org/10.1109/TEM.2005.844927CrossRef

16.

Munn, Z., Peters, M.D.J., Stern, C., Tufanaru, C., McArthur, A., Aromataris, E.: Systematic review or scoping review? guidance for authors when choosing between a systematic or scoping review approach. BMC Med. Res. Methodol. 18(1), 1–7 (2018). https://doi.org/10.1186/S12874-018-0611-X/TABLES/1CrossRef

17.

Ki Bareh, C.: Assessment of the privacy and security practices of the Indian academic websites. Libr. Phil. Pract. (e-j.) 6426, 2–31 (2021)

18.

Gluck, J., et al.: How short is too short? implications of length and framing on the effectiveness of privacy notices. In: eProceedings of the Twelfth Symposium on Usable Privacy and Security (SOUPS 2016), pp. 321–340 (2016)

19.

Linden, T., Khandelwal, R., Harkous, H., Fawaz, K.: The privacy policy landscape after the GDPR. Proc. Priv. Enhan. Technol. 2020(1), 47–64 (2020). https://doi.org/10.2478/popets-2020-0004CrossRef

20.

Tjhin, I., Vos, M., Munaganuri, S.: Privacy governance online: privacy policy practices on New Zealand websites. In: Proceedings of the Pacific Asia Conference on Information Systems (PACIS), New Zeeland, vol. 36, pp. 2–16 (2016)

21.

Al-Jamal, M., Abu-Shanab, E.: Privacy policy of e-government websites and the effect on users’ privacy. In: Proceedings of the 7th International Conference on Information Technology, Alzaytoonah University of Jordan, pp. 338–344 (2015). https://doi.org/10.15849/ICIT.2015.0066

22.

Wilson, S., et al.: The creation and analysis of a website privacy policy corpus, pp. 1330–1340. Association for Computational Linguistics (2016)

23.

Schwartz, P.M.: Global data privacy: the EU way. New York Univ. Law Rev. 94, 101–146 (2019)

24.

Waldman, A.E.: Privacy, notice, and design. Stanford Technol. Law Rev. 21(129), 130–184 (2018)

25.

Anton, A.I., et al.: Financial privacy policies and the need for standardization. IEEE Secur. Priv. 2(2), 36–45 (2004). https://doi.org/10.1109/MSECP.2004.1281243CrossRef

26.

Alabduljabbar, A., Mohaisen, D.: Measuring the privacy dimension of free content websites through automated privacy policy analysis and annotation. In: Proceedings of the WWW 2022 - Companion Proceedings of the Web Conference, pp. 860–867 (2022). https://doi.org/10.1145/3487553.3524663

27.

Heale, R., Twycross, A.: What is a case study? Evid Based Nurs 21(1), 7–8 (2018). https://doi.org/10.1136/EB-2017-102845CrossRef

28.

Yin, R.K.: Case Study Research and Applications, 6th edn. Sage Publications, California (2014)

29.

Taherdoost, H.: Sampling methods in research methodology, how to choose a sampling technique for research. Int. J. Acad. Res. Manag. (IJARM) 5(2), 18–27 (2016). https://doi.org/10.2139/SSRN.3205035CrossRef

Titel: Privacy Policies on Websites: A Case Study in the Financial Industry in South Africa
verfasst von: Alisa Dayanand
Adéle da Veiga
Verlag: Springer Nature Switzerland
Buch: Human Aspects of Information Security and Assurance
Print ISBN: 978-3-031-72562-3

Electronic ISBN: 978-3-031-72563-0

Copyright-Jahr: 2025
DOI: https://doi.org/10.1007/978-3-031-72563-0_11

Springer Professional

Abstract

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"