Data protection and tech startups: The need for attention, support, and scrutiny
Data protection and tech startups: The need for attention, support, and scrutiny
复制标题
数据保护和科技初创公司：需要关注、支持和审查
DOI：
10.1002/poi3.255
复制
发表时间：
2021
影响因子：
4.9
通讯作者：
Norval C
中科院分区：
文献类型：
--
作者：
Norval C
尽管数据保护的讨论主要集中在规模更大、更成熟的组织上，但初创企业也值得关注。对于科技初创公司来说尤其如此，他们经常在“前沿”进行创新，突破通常缺乏既定数据保护最佳实践的技术界限。初创公司做出的最初决定很可能会产生长期影响，他们的行动可能会告诉你（无论好坏）他们支持的特定技术和应用程序在未来几年如何实施、部署和感知。因此，确保科技初创公司的创新和实践是健全的、适当的和可接受的应该是重中之重。本文探讨了科技初创公司对数据保护问题的态度和准备情况。随着欧盟《通用数据保护条例》(GDPR) 的生效，我们采访了一系列总部位于英国的新兴科技初创公司，该条例揭示了初创公司的方法与 GDPR 的性质和要求之间存在脱节的领域。我们讨论了创新科技初创企业面临的误解和相关风险，并为公司和监管机构提供了一些考虑因素。根据我们的讨论，并考虑到所面临的利害关系，我们认为需要采取更多措施来帮助确保新兴技术和运营这些技术的公司的实践更好地符合监管义务。我们的结论是，科技初创公司值得更多的关注、支持和审查，以提高数据保护标准，造福我们所有人。
Though discussions of data protection have focused on the larger, more established organisations, startups also warrant attention. This is particularly so for tech startups, who are often innovating at the ‘cutting‐edge’—pushing the boundaries of technologies that typically lack established data protection best‐practices. Initial decisions taken by startups could well have long‐term impacts, and their actions may inform (for better or for worse) how particular technologies and the applications they support are implemented, deployed, and perceived for years to come. Ensuring that the innovations and practices of tech startups are sound, appropriate and acceptable should therefore be a high priority. This paper explores the attitudes and preparedness of tech startups to issues of data protection. We interviewed a series of UK‐based emerging tech startups as the EU's General Data Protection Regulation (GDPR) came into effect, which revealed areas in which there is a disconnect between the approaches of the startups and the nature and requirements of the GDPR. We discuss the misconceptions and associated risks facing innovative tech startups and offer a number of considerations for the firms and supervisory authorities alike. In light of our discussions, and given what is at stake, we argue that more needs to be done to help ensure that emerging technologies and the practices of the companies that operate them better align with the regulatory obligations. We conclude that tech startups warrant increased attention, support, and scrutiny to raise the standard of data protection for the benefit of us all.