Abstract:Information privacy concerns have been rising over a few decades. As per the recent General Data Protection Regulation, organizations need to implement the highest-possible privacy settings by design and default. Following the neo-institutional theory, this study develops a model for understanding the mechanism of information privacy assimilation in Information Technology (IT) organizations. This study treats information privacy as a distinct dimension separate from security. After analyzing a sample survey data of 214 respondents from the IT industry, privacy capability and organizational culture emerged as influencing factors with a statistically significant influence on information privacy assimilation. The findings from this study support the mediating role of senior management participation between the external coercive forces and privacy-related business strategy. Business strategy also plays a mediating role between coercive/normative forces and privacy-related activities within an organization. Here the mimetic forces show a direct influence on privacy-related activities. A positive moderating effect of organizational culture on normative forces and privacy-related activities relationship; and a negative moderating effect of privacy capability on mimetic forces and privacy-related activities relationship are observed. These findings could enable senior managers to respond to institutional pressures by focusing on appropriate factors within an organization for developing effective privacy strategies and actions. This work is an extension of the pilot work that was published in Communications of the Association for Information Systems (CAIS), 2018. The prior work focuses on developing the propositions qualitatively. Building on that, we have formally defined the hypotheses, developed the appropriate survey instrument and collected the primary data which is large enough to do adequate analysis. Adopted a quantitative approach using an extensive sample survey of IT organizations, followed a more rigorous process for data collection, analysis, and discussion of the results. In addition, based on the lessons learned from the pilot study, we have updated the research model and hypotheses with a focus on privacy-related business strategy and activities.

Information privacy, gender differences, and intrinsic motivation in the workplace

Effect of construal level and job insecurity on responses to perceived external employability

Gender Identity,Self-esteem and Gender-based Ingroup Bias of College Students

Gender differences in the work commitment of Chinese workers: An investigation of two alternative explanations

Gender, gender identification and perceived gender discrimination

Gender, gender identification and perceived gender discrimination: An examination of mediating processes in China

Research on Privacy Disclosure Behavior of Mobile App Users from Perspectives of Online Social Support and Gender Differences

How internet use affects personal privacy risk perception: empirical evidence from China

Information-Sharing Behavior on WeChat Moments: The Role of Anonymity, Familiarity, and Intrinsic Motivation

Motivating Information System Engineers’ Acceptance of Privacy by Design in China: an Extended UTAUT Model

Perceptions of Parental Privacy Invasion and Information Management among Chinese Adolescents: Comparing Between- and Within-Family Associations

Information privacy and correlates: an empirical attempt to bridge and distinguish privacy-related concepts

Self-disclosure in Mobile Payment Applications: Common and Differential Effects of Personal and Proxy Control Enhancing Mechanisms

Internet Information Privacy Concerns and Privacy Protection Behavior of College Students in Shanghai

Information Privacy Assimilation in IT Organizations

Research on the Antecedents of Data Privacy Concern Toward Intelligent Connected Vehicles

Effects of Perceived Privacy Risk and Disclosure Benefits on the Online Privacy Protection Behaviors among Chinese Teens

Ensuring Employees' Information Security Policy Compliance by Carrot and Stick: the Moderating Roles of Organizational Commitment and Gender

Gender Role Conflict, Professional Role Confidence, And Intentional Persistence In Engineering Students In China

Factors Associated with the Patient Privacy Protection Behaviours of Nursing Interns in China: A Cross-sectional Study

Examining the inconsistent effect of privacy control on privacy concerns in e-commerce services: The moderating role of privacy experience and risk propensity