A conceptual privacy governance framework

Abstract

Owing to the growth of technological advancements and the enactment of comprehensive data privacy legislation, organisations must meet the requirements of privacy laws. Organisations must incorporate the protection of personal information in their strategic planning and govern it across the organisation. The purpose of this paper is to propose a conceptual privacy governance framework. This is done by comparing existing privacy governance frameworks and proposing a consolidated framework that incorporates a comprehensive set of privacy components that can assist management in governing privacy across an organisation. Such a framework can serve as a point of reference to assist organisations in obtaining the support of senior management, establishing clear processes and delegating responsibilities to individuals, utilising existing standards, and establishing monitoring and audit practices. The privacy governance framework can help to reinforce privacy protection, enhance the organisation's reputation, foster a culture of privacy and ensure compliance with privacy regulatory requirements.