Privacy in ERP Systems: Behavioral Models of Developers and Consultants

TL;DR

This paper explores privacy behaviors of ERP system developers and consultants, using behavioral models to identify gaps in privacy awareness and suggest ways to improve privacy practices in compliance with regulations.

Contribution

It introduces behavioral models of privacy awareness for ERP developers and consultants based on Fogg's Behavioral Model, addressing gaps in privacy-by-design and data minimization.

Findings

Identifies privacy awareness gaps among developers and consultants.

Provides behavioral models to improve privacy practices.

Suggests strategies for enhancing privacy compliance.

Abstract

Applications like Enterprise Resource Planning (ERP) systems have become an indispensable part of the corporate digital infrastructure. These systems store sensitive data about customers, suppliers, and employees, and thus companies have to process these data in accordance with applicable regulations like the GDPR (the EU General Data Protection Regulation). This can be challenging due to a variety of reasons. For example, prior research has shown that developers sometimes lack knowledge about privacy. In this work, we focus on privacy in ERP systems in the context of an international consultancy firm. We investigate the privacy awareness regarding privacy-by-design and data minimization of two important populations: developers of ERP systems and managers and consultants responsible for services related to ERP systems. Applying thematic analysis, we elicit privacy behavioral models of these two populations using Fogg's Behavioral Model (FBM) framework. Our findings provide a means to stimulate more adequate privacy-related behaviors for developers and consultants.