What is the impact of GDPR on Third Sector Organisations?

GDPR 对第三部门组织有何影响？

• 批准号: 2278800
• 金额: --
• 依托单位: University of Southampton
• 依托单位国家: 英国
• 项目类别: Studentship
• 财政年份: 2019
• 资助国家: 英国
• 起止时间: 2019 至 无数据
• 项目状态: 未结题
• 来源: https://gtr.ukri.org/projects?ref=studentship-2278800
• 关键词: What; impact; GDPR; Third; Sector

Overview The General Data Protection Regulation (GDPR) came into force on the 25th May 2018 replacing the Directive that previously legislated for protecting personal data. As the population embraced the digital revolution TSOs started to use technology to manage their activities (Denison and Johanson, 2007). Databases of personal information were collated to maintain contact with supporters, raise money, provide information and run campaigns. To be compliant, TSOs have had to review the data they hold. They have to ensure they can evidence they have obtained consent and put policies in place to manage data. A survey by nfpSynergy (Cooney, 2018), found that more than half of the respondents saw a reduction in the number of supporters they could contact. Concerns were expressed about the resources needed to become compliant and that this took them away from carrying out their work. It is imperative to see if there is a corresponding drop in income and engagement and the consequences this may have on their ability to meet their objectives. Research design and methodologyThe aim of the project is to discover what impact the introduction of GDPR has had on TSOs in Southampton. There are a number of areas that need investigation:1. How did TSOs use ICT to prior to the introduction of GDPR?2. In what ways do clients and supporters want to communicate with TSOs via ICT? 3. What challenges did they face in ensuring the data they now hold is complaint?4. How has the way TSOs use ICT changed since GDPR came into force?5. Has the introduction of GDPR had any positive impact? 6. Has the introduction of GDPR had a negative impact?The size of the TSO will be relevant when considering the data collected. The NCVO list five categories based on income; micro, small, medium and large.The research aims to explore the similarities and differences in the impact on Micro, Small and Medium TSO's in Southampton. The experiences of these organisations, with no/low numbers of paid staff differs to those with access to greater resources (Charity Commission, 2010). There are also constraints in gaining similar access to key people in larger organisations MethodologyThe study will use interviews and surveys to collect data.Semi-structured interviews to gain information directly from people working in TSOs .The study aims to speak to a minimum of 10 organisations in each group Surveys to compliment the semi-structured interviews to obtain quantitative data A random sample public opinion survey to obtain data on how clients and supporters want to communicate with TSOs via ICT. LiteratureGDPR is an emerging study area. The Economic & Social Research Council and Universities of Birmingham and Sheffield Hallam have Third Sector Research Centre's. The International Society for Third Sector Research is the gateway to journals that publish research relating to TSOs. These bodies will hold much of the key literature the research will draw on. The use of TSOs to deliver public services has increased in recent years Brandsen and Pestoff (2006) have published a collection of studies on developing understanding of this and its impact on public policy. International Data Privacy Law journal will also contain publications that will be relevant to the legislative areas of the research. The industry publications Third Sector and the NVCO carry out research for TSOs which will contain findings that will inform this study.Burt and Taylor (2011) carried out a review on how charities in the UK use the internet. The review raised concerns that TSOs were collecting, storing, using and sharing personal data in ways that made it vulnerable. This research links to a number of key texts.

概述《通用数据保护条例》（GDPR）于2018年5月25日生效，取代了之前为保护个人数据而立法的指令。随着人们接受数字革命，TSO开始使用技术来管理其活动（Denison和Johanson，2007年）。整理了个人信息数据库，以保持与支持者的联系，筹集资金，提供信息和开展活动。为了遵守规定，TSO不得不审查他们持有的数据。他们必须确保他们可以证明他们已经获得同意，并制定政策来管理数据。nfpSynergy（Cooney，2018）的一项调查发现，超过一半的受访者看到他们可以联系的支持者数量减少。与会者对遵约所需的资源表示关切，认为这会使他们无法开展工作。必须了解收入和参与度是否相应下降，以及这可能对他们实现目标的能力产生的后果。研究设计和方法该项目的目的是发现GDPR的引入对南安普顿的TSO产生了什么影响。有几个方面需要调查：1。在GDPR引入之前，TSO如何使用ICT？2.客户和支持者希望以何种方式通过ICT与TSO沟通？3.在确保他们现在持有的数据是投诉方面，他们面临哪些挑战？4.自GDPR生效以来，TSO使用ICT的方式发生了哪些变化？5. GDPR的引入是否产生了积极影响？6. GDPR的引入是否产生了负面影响？在考虑收集的数据时，TSO的规模将是相关的。NCVO根据收入列出了五个类别;微型，小型，中型和大型。研究旨在探讨南安普顿微型，小型和中型TSO影响的异同。这些组织没有或很少有受薪工作人员，其经验与那些获得更多资源的组织不同（慈善委员会，2010年）。在与大型组织的关键人物进行类似接触方面也存在限制方法研究将使用访谈和调查来收集数据。半结构化访谈直接从TSO工作人员那里获得信息。研究旨在与每组至少10个组织进行交谈。结构化访谈以获取定量数据一项随机抽样的民意调查，以获取关于客户和支持者希望如何通过信通技术与技术服务组织沟通的数据。GDPR是一个新兴的研究领域。经济和社会研究理事会和伯明翰大学和谢菲尔德哈勒姆大学都有第三部门研究中心。国际第三部门研究学会是获取发表与技术支持组织相关研究的期刊的门户。这些机构将拥有大量的关键文献的研究将借鉴。使用技术支持组织提供公共服务近年来增加了Brandsen和Pestoff（2006）已经出版了一个研究集合，以发展对这一点的理解及其对公共政策的影响。《国际数据隐私法》期刊还将包含与研究的立法领域相关的出版物。行业出版物《Third Sector》和NVCO对TSO进行了研究，其中包含的调查结果将为本研究提供信息。Burt和Taylor（2011）对英国慈善机构如何使用互联网进行了审查。审查提出了对技术安全组织收集、存储、使用和分享个人数据的方式使其易受攻击的关切。这项研究与一些关键文本有关。