{"id":"https://openalex.org/W4318191846","doi":"https://doi.org/10.1177/02683962231155937","title":"Toward a taxonomy of corporate data protection malpractices and their causal mechanisms: A regulatory view","display_name":"Toward a taxonomy of corporate data protection malpractices and their causal mechanisms: A regulatory view","publication_year":2023,"publication_date":"2023-01-27","ids":{"openalex":"https://openalex.org/W4318191846","doi":"https://doi.org/10.1177/02683962231155937"},"language":"en","primary_location":{"id":"doi:10.1177/02683962231155937","is_oa":false,"landing_page_url":"https://doi.org/10.1177/02683962231155937","pdf_url":null,"source":{"id":"https://openalex.org/S135086714","display_name":"Journal of Information Technology","issn_l":"0268-3962","issn":["0268-3962","1466-4437"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320017","host_organization_name":"SAGE Publishing","host_organization_lineage":["https://openalex.org/P4310320017"],"host_organization_lineage_names":["SAGE Publishing"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Information Technology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084487561","display_name":"Zhao Hai-ping","orcid":"https://orcid.org/0000-0002-8864-2790"},"institutions":[{"id":"https://openalex.org/I4210162190","display_name":"China University of Petroleum, East China","ror":"https://ror.org/05gbn2817","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210162190"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haiping Zhao","raw_affiliation_strings":["Department of Information Management, School of Economics and Management, China University of Petroleum, Qingdao, China"],"raw_orcid":"https://orcid.org/0000-0002-8864-2790","affiliations":[{"raw_affiliation_string":"Department of Information Management, School of Economics and Management, China University of Petroleum, Qingdao, China","institution_ids":["https://openalex.org/I4210162190"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084300520","display_name":"Na Jiang","orcid":"https://orcid.org/0000-0001-5730-3465"},"institutions":[{"id":"https://openalex.org/I12615008","display_name":"Beijing Normal-Hong Kong Baptist University","ror":"https://ror.org/04snvc712","country_code":"CN","type":"education","lineage":["https://openalex.org/I12615008"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Na Jiang","raw_affiliation_strings":["Department of Management, Faculty of Business and Management, BNU-HKBU United International College, Zhuhai, China"],"raw_orcid":"https://orcid.org/0000-0001-5730-3465","affiliations":[{"raw_affiliation_string":"Department of Management, Faculty of Business and Management, BNU-HKBU United International College, Zhuhai, China","institution_ids":["https://openalex.org/I12615008"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090125477","display_name":"Zhao Cai","orcid":"https://orcid.org/0000-0001-8705-4164"},"institutions":[{"id":"https://openalex.org/I13591777","display_name":"University of Nottingham Ningbo China","ror":"https://ror.org/03y4dt428","country_code":"CN","type":"education","lineage":["https://openalex.org/I13591777","https://openalex.org/I142263535"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhao Cai","raw_affiliation_strings":["Department of Entrepreneurship, Marketing and Management Systems, Nottingham University Business School China, University of Nottingham Ningbo China, Ningbo, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Entrepreneurship, Marketing and Management Systems, Nottingham University Business School China, University of Nottingham Ningbo China, Ningbo, China","institution_ids":["https://openalex.org/I13591777"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066290993","display_name":"Eric T.K. Lim","orcid":"https://orcid.org/0000-0003-3317-8406"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Eric T. K. Lim","raw_affiliation_strings":["School of Information Systems and Technology Management, UNSW Business School, UNSW Sydney, Sydney, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Systems and Technology Management, UNSW Business School, UNSW Sydney, Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000211409","display_name":"Chee\u2010Wee Tan","orcid":"https://orcid.org/0000-0003-4245-541X"},"institutions":[{"id":"https://openalex.org/I180519160","display_name":"Copenhagen Business School","ror":"https://ror.org/04sppb023","country_code":"DK","type":"education","lineage":["https://openalex.org/I180519160"]}],"countries":["DK"],"is_corresponding":false,"raw_author_name":"Chee-Wee Tan","raw_affiliation_strings":["Department of Digitalization, Copenhagen Business School, Copenhagen, Denmark"],"raw_orcid":"https://orcid.org/0000-0003-4245-541X","affiliations":[{"raw_affiliation_string":"Department of Digitalization, Copenhagen Business School, Copenhagen, Denmark","institution_ids":["https://openalex.org/I180519160"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5084300520"],"corresponding_institution_ids":["https://openalex.org/I12615008"],"apc_list":null,"apc_paid":null,"fwci":1.651,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.85855229,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"38","issue":"3","first_page":"319","last_page":"333"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9829999804496765,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13851","display_name":"Law, AI, and Intellectual Property","score":0.9800999760627747,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.6243650913238525},{"id":"https://openalex.org/keywords/strategic-information-system","display_name":"Strategic information system","score":0.6026481986045837},{"id":"https://openalex.org/keywords/soft-systems-methodology","display_name":"Soft systems methodology","score":0.521028995513916},{"id":"https://openalex.org/keywords/information-systems-security","display_name":"Information systems security","score":0.46918702125549316},{"id":"https://openalex.org/keywords/information-system","display_name":"Information system","score":0.42580482363700867},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4106355905532837},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3961801826953888},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.39559128880500793},{"id":"https://openalex.org/keywords/management-science","display_name":"Management science","score":0.35701391100883484},{"id":"https://openalex.org/keywords/management-information-systems","display_name":"Management information systems","score":0.3450500965118408},{"id":"https://openalex.org/keywords/accounting","display_name":"Accounting","score":0.3248833119869232},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.23939311504364014},{"id":"https://openalex.org/keywords/economics","display_name":"Economics","score":0.18834424018859863}],"concepts":[{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.6243650913238525},{"id":"https://openalex.org/C65986115","wikidata":"https://www.wikidata.org/wiki/Q1135904","display_name":"Strategic information system","level":4,"score":0.6026481986045837},{"id":"https://openalex.org/C141846272","wikidata":"https://www.wikidata.org/wiki/Q613474","display_name":"Soft systems methodology","level":4,"score":0.521028995513916},{"id":"https://openalex.org/C2988319471","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information systems security","level":4,"score":0.46918702125549316},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.42580482363700867},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4106355905532837},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3961801826953888},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.39559128880500793},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.35701391100883484},{"id":"https://openalex.org/C29848774","wikidata":"https://www.wikidata.org/wiki/Q61905","display_name":"Management information systems","level":3,"score":0.3450500965118408},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.3248833119869232},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.23939311504364014},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.18834424018859863},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1177/02683962231155937","is_oa":false,"landing_page_url":"https://doi.org/10.1177/02683962231155937","pdf_url":null,"source":{"id":"https://openalex.org/S135086714","display_name":"Journal of Information Technology","issn_l":"0268-3962","issn":["0268-3962","1466-4437"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320017","host_organization_name":"SAGE Publishing","host_organization_lineage":["https://openalex.org/P4310320017"],"host_organization_lineage_names":["SAGE Publishing"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Information Technology","raw_type":"journal-article"},{"id":"pmh:oai:research-api.cbs.dk:publications/0f30ca98-d249-410a-8e1a-9a6c7ce055fe","is_oa":false,"landing_page_url":"https://research.cbs.dk/en/publications/0f30ca98-d249-410a-8e1a-9a6c7ce055fe","pdf_url":null,"source":{"id":"https://openalex.org/S4306401458","display_name":"CBS Research Portal (Copenhagen Business School)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I180519160","host_organization_name":"Copenhagen Business School","host_organization_lineage":["https://openalex.org/I180519160"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Zhao, H, Jiang, N, Cai, Z, Lim, E T K & Tan, C-W 2023, 'Toward a Taxonomy of Corporate Data Protection Malpractices and Their Causal Mechanisms : A Regulatory View', Journal of Information Technology, vol. 38, no. 3, pp. 319-333. https://doi.org/10.1177/02683962231155937","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:aisel.aisnet.org:jit-2093","is_oa":false,"landing_page_url":"https://aisel.aisnet.org/jit/vol38/iss3/5","pdf_url":null,"source":{"id":"https://openalex.org/S30879505","display_name":"Journal of the Association for Information Systems","issn_l":"1536-9323","issn":["1536-9323"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310321080","host_organization_name":"Association for Information Systems","host_organization_lineage":["https://openalex.org/P4310321080"],"host_organization_lineage_names":["Association for Information Systems"],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Information Technology","raw_type":"text"},{"id":"pmh:oai:research-api.cbs.dk:openaire_cris_publications/0f30ca98-d249-410a-8e1a-9a6c7ce055fe","is_oa":false,"landing_page_url":"https://hdl.handle.net/10398/0f30ca98-d249-410a-8e1a-9a6c7ce055fe","pdf_url":null,"source":{"id":"https://openalex.org/S4306401458","display_name":"CBS Research Portal (Copenhagen Business School)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I180519160","host_organization_name":"Copenhagen Business School","host_organization_lineage":["https://openalex.org/I180519160"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Zhao, H, Jiang, N, Cai, Z, Lim, E T K & Tan, C-W 2023, 'Toward a Taxonomy of Corporate Data Protection Malpractices and Their Causal Mechanisms : A Regulatory View', Journal of Information Technology, vol. 38, no. 3, pp. 319-333. https://doi.org/10.1177/02683962231155937","raw_type":"info:eu-repo/semantics/publishedVersion"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G349161095","display_name":null,"funder_award_id":"ZR2022QG065","funder_id":"https://openalex.org/F4320324174","funder_display_name":"Natural Science Foundation of Shandong Province"}],"funders":[{"id":"https://openalex.org/F4320324174","display_name":"Natural Science Foundation of Shandong Province","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W1545190392","https://openalex.org/W1598226182","https://openalex.org/W1658908529","https://openalex.org/W1870146437","https://openalex.org/W1963620879","https://openalex.org/W1964044985","https://openalex.org/W1966263568","https://openalex.org/W1979290264","https://openalex.org/W1981185359","https://openalex.org/W2014699457","https://openalex.org/W2014884171","https://openalex.org/W2066418358","https://openalex.org/W2070587769","https://openalex.org/W2073818970","https://openalex.org/W2098954524","https://openalex.org/W2119068246","https://openalex.org/W2124421215","https://openalex.org/W2150238850","https://openalex.org/W2155864340","https://openalex.org/W2237709800","https://openalex.org/W2343673183","https://openalex.org/W2489017309","https://openalex.org/W2537851856","https://openalex.org/W2575552234","https://openalex.org/W2911560572","https://openalex.org/W2911855753","https://openalex.org/W2912041508","https://openalex.org/W2936739419","https://openalex.org/W2940403283","https://openalex.org/W3007991399","https://openalex.org/W3010892808","https://openalex.org/W3025835448","https://openalex.org/W3122849737","https://openalex.org/W3125629800","https://openalex.org/W4229610375"],"related_works":["https://openalex.org/W2101394746","https://openalex.org/W1998751061","https://openalex.org/W2016384743","https://openalex.org/W115484909","https://openalex.org/W2076633883","https://openalex.org/W2028302819","https://openalex.org/W4237458235","https://openalex.org/W4256082807","https://openalex.org/W1978187271","https://openalex.org/W2041579241"],"abstract_inverted_index":{"Corporate":[0],"data":[1,26,42,100,131,166],"protection":[2,27,43,101,132,167],"malpractices":[3,102,133,142,168],"are":[4],"not":[5,127],"uncommon,":[6],"especially":[7],"in":[8,135,147],"contemporary":[9],"technological":[10],"environments.":[11],"Embracing":[12],"a":[13,21,73,87,151],"regulatory":[14],"view,":[15],"this":[16,61,125,154],"study":[17,62,126,155],"attempts":[18],"to":[19],"advance":[20],"taxonomy":[22,66],"of":[23,79,97,115,164],"prevailing":[24,98],"corporate":[25,99,130,165],"practices":[28],"and":[29,71,94,112,162],"their":[30],"causal":[31,116],"mechanisms":[32,117],"by":[33,53],"analyzing":[34],"cases":[35,78],"where":[36],"organizations":[37,105],"were":[38],"fined":[39],"for":[40,169],"violating":[41],"legislation.":[44],"Selecting":[45],"the":[46,54,160],"General":[47],"Data":[48],"Protection":[49],"Regulation":[50],"(GDPR)":[51],"enacted":[52],"European":[55],"Union":[56],"(EU)":[57],"as":[58,69,106,108],"our":[59],"benchmark,":[60],"employs":[63],"an":[64],"iterative":[65],"development":[67],"technique":[68],"guidance":[70],"conducts":[72],"thematic":[74],"analysis":[75],"on":[76],"875":[77],"GDPR":[80],"enforcement.":[81],"In":[82],"so":[83],"doing,":[84],"we":[85],"derive":[86],"conceptual":[88],"model":[89],"comprising":[90],"6":[91],"focal":[92],"categories":[93,111],"28":[95],"subcategories":[96,114],"existing":[103],"within":[104],"well":[107],"4":[109],"main":[110],"22":[113],"underlying":[118],"these":[119],"identified":[120],"malpractices.":[121],"Empirical":[122],"findings":[123],"from":[124],"only":[128],"reinforce":[129],"established":[134],"prior":[136],"research":[137],"but":[138],"also":[139],"yield":[140],"novel":[141],"that":[143],"have":[144],"been":[145],"neglected":[146],"previous":[148],"work.":[149],"From":[150],"pragmatic":[152],"standpoint,":[153],"yields":[156],"invaluable":[157],"insights":[158],"into":[159],"prevention":[161],"resolution":[163],"practitioners.":[170]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}