{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,5]],"date-time":"2026-04-05T03:01:08Z","timestamp":1775358068274,"version":"3.50.1"},"reference-count":50,"publisher":"Emerald","issue":"3","license":[{"start":{"date-parts":[[2019,8,14]],"date-time":"2019-08-14T00:00:00Z","timestamp":1565740800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.emerald.com\/insight\/site-policies"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["ICS"],"published-print":{"date-parts":[[2019,8,14]]},"abstract":"<jats:sec>\n<jats:title content-type=\"abstract-subheading\">Purpose<\/jats:title>\n<jats:p>The purpose of this study was to investigate the difference between South Africa (SA) and the United Kingdom (UK) in terms of data protection compliance with the aim to establish if a country that has had data protection in place for a longer period of time has a higher level of compliance with data protection requirements in comparison with a country that is preparing for compliance.<\/jats:p>\n<\/jats:sec>\n<jats:sec>\n<jats:title content-type=\"abstract-subheading\">Design\/methodology\/approach<\/jats:title>\n<jats:p>An insurance industry multi-case study within the online insurance services environment was conducted. Personal information of four newly created consumer profiles was deposited to 10 random insurance organisation websites in each country to evaluate a number of data privacy requirements of the Data Protection Act and Protection of Personal Information Act.<\/jats:p>\n<\/jats:sec>\n<jats:sec>\n<jats:title content-type=\"abstract-subheading\">Findings<\/jats:title>\n<jats:p>The results demonstrate that not all the insurance organisations honored the selected opt-out preference for receiving direct marketing material. This was evident in direct marketing material that was sent from the insurance organisations in the sample to both the SA and UK consumer profiles who opted out for it. A total of 42 unsolicited third-party contacts were received by the SA consumer profiles, whereas the UK consumer profiles did not receive any third-party direct marketing. It was also found that the minimality principle is not always met by both SA and UK organisations.<\/jats:p>\n<\/jats:sec>\n<jats:sec>\n<jats:title content-type=\"abstract-subheading\">Research limitations\/implications<\/jats:title>\n<jats:p>As a jurisdiction with a heavy stance towards privacy implementation and regulation, it was found that the UK is more compliant than SA in terms of implementation of the evaluated data protection requirements included in the scope of this study, however not fully compliant.<\/jats:p>\n<\/jats:sec>\n<jats:sec>\n<jats:title content-type=\"abstract-subheading\">Originality\/value<\/jats:title>\n<jats:p>Based upon the results obtained from this research, it suggests that the SA insurance organisations should ensure that the non-compliance aspects relating to direct marketing and sharing data with third parties are addressed. SA insurance companies should learn from the manner in which the UK insurance organisations implement these privacy requirements. Furthermore, the UK insurance organisations should focus on improved compliance for direct marking and the minimality principle. The study indicates the positive role that data protection legislation plays in a county like the UK, with a more mature stance toward compliance with data protection legislation.<\/jats:p>\n<\/jats:sec>","DOI":"10.1108\/ics-11-2018-0135","type":"journal-article","created":{"date-parts":[[2019,8,28]],"date-time":"2019-08-28T10:05:58Z","timestamp":1566986758000},"page":"399-422","source":"Crossref","is-referenced-by-count":7,"title":["Comparing the protection and use of online personal information in South Africa and the United Kingdom in line with data protection requirements"],"prefix":"10.1108","volume":"28","author":[{"given":"Ad\u00e9le","family":"Da Veiga","sequence":"first","affiliation":[]},{"given":"Ruthea","family":"Vorster","sequence":"additional","affiliation":[]},{"given":"Fudong","family":"Li","sequence":"additional","affiliation":[]},{"given":"Nathan","family":"Clarke","sequence":"additional","affiliation":[]},{"given":"Steven M.","family":"Furnell","sequence":"additional","affiliation":[]}],"member":"140","reference":[{"key":"key2020071513123772600_ref001","article-title":"Data protection what the regulations say","author":"Audiencedatasharing","year":"2019"},{"key":"key2020071513123772600_ref002","first-page":"57","article-title":"A high-level comparison between the South African protection of personal information act and international data protection laws","year":"2017"},{"key":"key2020071513123772600_ref003","unstructured":"Bygrave, L. (2010), \u201cPrivacy and data protection in an international perspective\u201d, Stockholm Institute for Scandinavian Law, Vol. 56, p.165, available at: www.uio.no\/studier\/emner\/jus\/jus\/JUS5630\/v13\/undervisningsmateriale\/privacy-and-data-protection-in-international-perspective.pdf (accessed 20 November 2018)."},{"key":"key2020071513123772600_ref004","first-page":"65","article-title":"The influence of data protection regulation on the information security culture on an organisation \u2013 a case study comparing legislation and offices across jurisdictions","volume-title":"Proceedings of the Eleventh International Symposium on Human Aspects of Information Security and Assurance (HAISA 2017)","year":"2017"},{"issue":"3","key":"key2020071513123772600_ref005","doi-asserted-by":"crossref","first-page":"338","DOI":"10.1108\/ICS-03-2018-0036","article-title":"An information privacy culture instrument to measure consumer privacy expectations and confidence","volume":"26","year":"2018","journal-title":"Information and Computer Security"},{"key":"key2020071513123772600_ref006","unstructured":"Dell EMC (2015), \u201cThe EMC privacy index, global and in-depth country results\u201d, EMC, available at: www.emc.com\/collateral\/brochure\/privacy-index-global-in-depth-results.pdf (accessed 30 October 2017)."},{"key":"key2020071513123772600_ref007","unstructured":"DLA Piper (2018), \u201cData protection laws of the world, full handbook\u201d, available at: www.dlapiperdataprotection.com\/index.html (accessed 17 April 2018), pp. 1-513."},{"key":"key2020071513123772600_ref008","unstructured":"Etheridge, J. (2018), \u201cHawks, SSA probing major \u2018leak\u2019 of personal data of SA drivers who use viewfines\u201d, News24, available at: www.news24.com\/SouthAfrica\/News\/hawks-ssa-probing-major-leak-of-personal-data-of-sa-drivers-who-use-viewfines-20180524 (accessed 22 August 2018)."},{"issue":"1","key":"key2020071513123772600_ref009","doi-asserted-by":"publisher","first-page":"1","DOI":"10.11648\/j.ajtas.20160501.11","article-title":"Comparison of convenience sampling and purposive sampling","volume":"5","year":"2016","journal-title":"American Journal of Theoretical and Applied Statistics"},{"key":"key2020071513123772600_ref010","unstructured":"European Commission DG Connect (2013), \u201cA european strategy on the data value chain\u201d, available at: https:\/\/ec.europa.eu\/digital-single-market\/news\/elements-data-value-chain-strategy (accessed 15 October 2017)."},{"key":"key2020071513123772600_ref011","unstructured":"Fair Information Practice Principles (FIPPS) (2018), \u201cIT law wikia\u201d, available at: http:\/\/itlaw.wikia.com\/wiki\/Fair_Information_Practice_Principles (accessed 29 March 2018)."},{"key":"key2020071513123772600_ref012","unstructured":"Fihlani, P. (2017), \u201cMillions caught in South Africa\u2019s worst data breach\u201d, BBC News, available at: www.bbc.com\/news\/world-africa-41696703 (accessed 28 April 2018)."},{"key":"key2020071513123772600_ref013","volume-title":"Data Protection Act (DPA)","author":"Great Britain","year":"1998"},{"key":"key2020071513123772600_ref014","volume-title":"The Privacy and Electronic Communications (EC Directive) Regulations (PECR)","author":"Great Britain","year":"2003"},{"key":"key2020071513123772600_ref015","doi-asserted-by":"publisher","article-title":"Sheherezade and the 101 data privacy laws: origins, significance and global trajectories","year":"2013","DOI":"10.2139\/ssrn.2280877"},{"key":"key2020071513123772600_ref016","volume-title":"Cultures and Organizations: Software of the Mind","year":"2010","edition":"3rd ed."},{"key":"key2020071513123772600_ref017","unstructured":"ICO (2012), \u201cDetermining what is personal data\u201d, available at: https:\/\/ico.org.uk\/media\/for-organisations\/documents\/1554\/determining-what-is-personal-data.pdf (accessed 5 November 2017)."},{"key":"key2020071513123772600_ref018","unstructured":"ICO (2014), \u201cProtecting personal data in online services: learning from the mistakes of others\u201d, available at: https:\/\/ico.org.uk\/media\/for-organisations\/documents\/1042221\/protecting-personal-data-in-online-services-learning-from-the-mistakes-of-others.pdf (accessed 5 November 2017)."},{"key":"key2020071513123772600_ref019","unstructured":"ICO (2016), \u201cDirect marketing\u201d, available at: https:\/\/ico.org.uk\/media\/for-organisations\/documents\/1555\/direct-marketing-guidance.pdf (accessed 7 November 2017)."},{"key":"key2020071513123772600_ref020","unstructured":"ICO (2017a), \u201cHome logic UK ltd: monetary penalties\u201d, available at: https:\/\/ico.org.uk\/action-weve-taken\/enforcement\/home-logic-uk-ltd\/ (accessed 22 October 2017)."},{"key":"key2020071513123772600_ref021","unstructured":"ICO (2017b), \u201cMoneysupermarket.com ltd: monetary penalties\u201d, available at: https:\/\/ico.org.uk\/action-weve-taken\/enforcement\/moneysupermarketcom-ltd\/ (accessed 22 September 2017)."},{"key":"key2020071513123772600_ref022","unstructured":"ICO (2018a), \u201cPrinciple (c): data minimisation\u201d, available at: https:\/\/ico.org.uk\/for-organisations\/guide-to-the-general-data-protection-regulation-gdpr\/principles\/data-minimisation\/ (accessed 22 August 2018)."},{"key":"key2020071513123772600_ref023","unstructured":"ICO (2018b), \u201cAMS marketing ltd\u201d, available at: https:\/\/ico.org.uk\/action-weve-taken\/enforcement\/ams-marketing-ltd\/ (accessed 20 August 2018)."},{"key":"key2020071513123772600_ref024","unstructured":"ICO (2019), \u201cPrivacy notices, transparency and control\u201d, available at: https:\/\/ico.org.uk\/for-organisations\/guide-to-data-protection\/privacy-notices-transparency-and-control\/ (accessed 7 November 2017)."},{"key":"key2020071513123772600_ref025","unstructured":"Information Regulator (2018), \u201cMedia statement \u2013 direct marketing association of South Africa\u201d, available at: www.justice.gov.za\/inforeg\/docs\/ms-20180727-DMASA.pdf (accessed 20 August 2018)."},{"key":"key2020071513123772600_ref026","unstructured":"Information Regulator (South Africa) (2017), \u201cDepartment of justice and constitutional development\u201d, available at: www.justice.gov.za\/inforeg\/index.html (accessed 15 August 2017)."},{"key":"key2020071513123772600_ref027","unstructured":"Itseeze (2018), \u201cGDPR 101 how to make sure your website is ready for the general data protection regulation\u201d, available at: https:\/\/itseeze.com\/blog\/gdpr-101-how-to-make-sure-your-website-is-ready-for-the-general-data-protection-regulation\/ (accessed 19 November 2018)."},{"key":"key2020071513123772600_ref028","unstructured":"Kumaraguru, P. and Cranor, L.F. (2005), \u201cPrivacy indexes: a survey of westin's studies\u201d, Carnegie Mellon University, School of Computer Science, Institute for Software Research International, pp. 368-394, available as ISRI Technical Report CMU-ISRI-05-138."},{"key":"key2020071513123772600_ref029","unstructured":"Leyden, J. (2017), \u201cLast year\u2019s ICO fines would be 79 times higher under GDPR\u201d, The Register, available at: www.theregister.co.uk\/2017\/04\/28\/ico_fines_post_gdpr_analysis\/ (accessed 17 November 2017)."},{"key":"key2020071513123772600_ref030","unstructured":"Malinga, S. (2018), \u201cInformation regulator is hard at work\u201d, ITWeb, available at: www.itweb.co.za\/content\/KWEBb7yax8D7mRjO (accessed 14 November 2018)."},{"key":"key2020071513123772600_ref031","doi-asserted-by":"crossref","first-page":"210","DOI":"10.1509\/jppm.14.139","article-title":"Privacy notices as tabula rasa: an empirical investigation into how complying with a privacy notice is related to meeting privacy expectations online","volume":"34","year":"2015","journal-title":"Journal of Public Policy and Marketing"},{"issue":"2","key":"key2020071513123772600_ref032","doi-asserted-by":"crossref","first-page":"135","DOI":"10.1007\/s11747-016-0495-4","article-title":"The role of data privacy in marketing","volume":"45","year":"2017","journal-title":"Journal of the Academy of Marketing Science"},{"key":"key2020071513123772600_ref033","unstructured":"Metzger, M. (2017), \u201cSharp rise in ICO fines and enforcement notices as GDPR races closer\u201d, SC Media UK, available at: www.scmagazineuk.com\/sharp-rise-in-ico-fines-and-enforcement-notices-as-gdpr-races-closer\/article\/665466\/ (accessed 17 November 2017)."},{"key":"key2020071513123772600_ref034","first-page":"102","article-title":"Desperately seeking assurances: segmenting users by their information-seeking preferences","year":"2014"},{"issue":"2","key":"key2020071513123772600_ref035","doi-asserted-by":"crossref","first-page":"124","DOI":"10.1108\/JICES-10-2014-0040","article-title":"Privacy by default\u2019 and active \u2018informed consent\u2019 by layers","volume":"14","year":"2016","journal-title":"Journal of Information, Communication and Ethics in Society"},{"key":"key2020071513123772600_ref036","unstructured":"Norton Rose Fulbright (2013), \u201cPoPI and insurance\u201d, available at: www.nortonrosefulbright.com\/knowledge\/publications\/74156\/popi-and-insurance (accessed 20 November 2018)."},{"key":"key2020071513123772600_ref037","unstructured":"Organisation for Economic Co-Operation and Development (OECD) (2013), \u201cThe OECD privacy framework\u201d, available at: www.oecd.org\/sti\/ieconomy\/oecd_privacy_framework.pdf (accessed 29 March 2018)."},{"key":"key2020071513123772600_ref038","doi-asserted-by":"crossref","first-page":"277","DOI":"10.28945\/3573","article-title":"A review of information privacy and its importance to consumers and organizations","volume":"19","year":"2016","journal-title":"Informing Science: The International Journal of an Emerging Transdiscipline"},{"key":"key2020071513123772600_ref039","unstructured":"PricewaterhouseCoopers (PwC) (2015), \u201cTurnaround and transformation in cybersecurity\u201d, available at: www.pwc.com\/gx\/en\/consultingservices\/information-security-survey\/assets\/pwcgsiss-2016-financial-services.pdf (accessed 19 November 2018)."},{"key":"key2020071513123772600_ref040","unstructured":"Sarkhel, A. and Alawadhi, N. (2017), \u201cHow your personal data sells cheaper than chewing gum\u201d, ETtech\u201d, available at: http:\/\/tech.economictimes.indiatimes.com\/news\/internet\/how-your-personal-data-sells-cheaper-than-chewing-gum\/57380518 (accessed 22 September 2017)."},{"key":"key2020071513123772600_ref041","unstructured":"Sirrus (2018), \u201cGDPR compliance for websites in 2018\u201d, available at: www.siruss.co.uk\/blog\/gdpr (accessed 19 November 2018)."},{"key":"key2020071513123772600_ref042","unstructured":"South Africa (1996), Constitution of the Republic of South Africa Act No. 108 of 1996, Government Gazette, No. 17678."},{"key":"key2020071513123772600_ref043","unstructured":"South Africa (2003), Regulation of Interception of Communication and Provision of Communication-related Information Act No. 70 of 2002, Government Gazette, Cape Town, 451(24286)."},{"key":"key2020071513123772600_ref044","volume-title":"The Consumer Protection Act (CPA) No. 68 of 2008","author":"South Africa","year":"2008"},{"key":"key2020071513123772600_ref045","volume-title":"Protection of Personal Information Act (POPIA) No. 4 of 2013","author":"South Africa","year":"2013"},{"issue":"2","key":"key2020071513123772600_ref046","doi-asserted-by":"publisher","first-page":"161","DOI":"10.1007\/s12525-015-0191-0","article-title":"The challenges of personal data markets and privacy","volume":"25","year":"2015","journal-title":"Electronic Markets"},{"key":"key2020071513123772600_ref047","volume-title":"Information Privacy, Official Reference for the Certified Information Privacy Professional","year":"2007"},{"key":"key2020071513123772600_ref048","unstructured":"The Economist (2017), \u201cThe world\u2019s most valuable resource is no longer oil, but data\u201d, The Economist Group Limited, available at: www.economist.com\/news\/leaders\/21721656-data-economy-demands-new-approach-antitrust-rules-worlds-most-valuable-resource (accessed 22 September 2017)."},{"key":"key2020071513123772600_ref049","unstructured":"Western Cape Government (2016), \u201cDecoding your South African ID number\u201d, available at: www.westerncape.gov.za\/general-publication\/decoding-your-south-african-id-number-0 (accessed 19 September 2017)."},{"key":"key2020071513123772600_ref050","volume-title":"Case Study Research and Applications: Design and Methods","year":"2003","edition":"3rd ed."}],"container-title":["Information &amp; Computer Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.emerald.com\/insight\/content\/doi\/10.1108\/ICS-11-2018-0135\/full\/xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.emerald.com\/insight\/content\/doi\/10.1108\/ICS-11-2018-0135\/full\/html","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,25]],"date-time":"2025-07-25T01:23:19Z","timestamp":1753406599000},"score":1,"resource":{"primary":{"URL":"http:\/\/www.emerald.com\/ics\/article\/28\/3\/399-422\/199260"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,8,14]]},"references-count":50,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2019,8,14]]}},"alternative-id":["10.1108\/ICS-11-2018-0135"],"URL":"https:\/\/doi.org\/10.1108\/ics-11-2018-0135","relation":{},"ISSN":["2056-4961","2056-4961"],"issn-type":[{"value":"2056-4961","type":"print"},{"value":"2056-4961","type":"print"}],"subject":[],"published":{"date-parts":[[2019,8,14]]}}}