GDPR & Data Privacy: Impact of Data Protection in Irish Small and Medium-Sized Enterprises (SMEs).

Abstract

Data privacy and protection is a concept which is developing due to the fast-paced evolution of information technology. The substantial reliance on technology especially due to the COVID-19 pandemic has peaked considerably. However, data protection laws such as the General Data Protection Regulation (GDPR) is enforced to issue penalties in the event of any data breaches. Since the enforcement of the GDPR, all businesses have been mandated to implement the guidelines into their operations. However, the focus for the GDPR implementation and compliance have been majorly on large companies who are high regulators of data collection, processing, harvesting and storage. These large companies have contributed to a series of data breaches and violation of data privacy and protection laws put in place to curb such occurrences. The question therein lies about the state of implementation and compliance of small and medium sized businesses in Ireland. There is minimal attention on Irish SMEs to implement and comply with the GDPR. This study focuses on the impact, challenges and compliance of Irish SMEs in relation to data privacy and protection. It explores the importance of cyber and digital security to these businesses in relation to securing the personal data of their customers, employees and the business. It also portrays the opinions of the Irish SMEs about the General Data Protection Regulations and its relevance to their business operational standards. This study also presents the data analysis and findings derived from the interviews granted by willing Irish business representatives, managers and owners. It shares their perspectives and what they have experienced with the GDPR implementation and compliance. These perspectives were critically examined and evaluated for the purpose of this study.