Data Privacy Governance as a Source of Competitive Advantage

Author

Susanna Ayensu Blankson, Jalia Nabadda, Oluwatosin Esther Ajewumi


Abstract

 Today, many people have said that data privacy management can provide an edge to a business against its competitors. However, the timing of this is unknown. In fact, some studies indicate that privacy regulations might be more beneficial to the large companies than the small ones. This conceptual paper examines this issue. It adopts two popular concepts from strategy research: the resource-based view and the dynamic capabilities view. 

First, the paper separates privacy governance from simple legal compliance. It then regards governance as a scale (or a scale-like object). On the bottom side, a firm just responds to the law. On the high end, a firm handles privacy maturely and flexibly.

The paper then merges four potential means of value of privacy governance: customer trust, reduction of risk, improved data quality, the ability to adapt. It evaluates each one based on VRIN (valuable, rare, inimitable, non-substitutable) criteria: is it valuable, rare, hard to copy, and is it hard to replace? Trust, lower risk, and better data quality do add value. But they are not always rare and difficult to duplicate. It is only an adaptive governance that will be difficult to imitate.

The paper also demonstrates that regulation has an impact. The more there is variation in rules, the more valuable the ability to coordinate is. Firms will then determine whether they have the resources to develop this ability. The paper concludes with a straightforward framework, three propositions to be tested, and ideas for future research.



Keywords

Data Privacy Governance, Competitive Advantage, Resource-based View, Dynamic capabilities, Data Protection Regulation, Firm Performance



Full Text:

Download Paper PDF


References


  • Abraham, R., Schneider, J., & vom Brocke, J. (2019). Data governance: A conceptual framework, structured review, and research agenda. International Journal of Information Management, 49(2), 424–438. https://doi.org/https://doi.org/10.1016/j.ijinfomgt.2019.07.008
  • Awad, N. F., & Krishnan, M. S. (2006). The personalization privacy paradox: An empirical evaluation of information transparency and the willingness to be profiled online for personalization. MIS Quarterly, 30(1), 13–28. https://doi.org/10.2307/25148715
  • Barney, J. (1991). Firm resources and sustained competitive advantage. Journal of Management, 17(1), 99–120. https://doi.org/https://doi.org/10.1177/014920639101700108
  • Bélanger, F., & Crossler, R. E. (2011). Privacy in the digital age: A review of information privacy research in information systems. MIS Quarterly, 35(4), 1017–1041. https://doi.org/10.2307/41409971
  • Cao, R., & Iansiti, M. (2021). Data governance, interoperability and standardization: Organizational adaptation to privacy regulation. https://www.hbs.edu/ris/Publication%20Files/21-122_77bc83c9-3aec-44ad-8bec-0c0fa181c8a8.pdf
  • Chaurasia, J. (2023, July 12). Data governance unlocks the impact of analytics: Data strategy & insights 2023. Forrester. https://www.forrester.com/blogs/data-governance-unlocks-the-impact-of-analytics-data-strategy-insights-2023
  • (2024, August 10). Cisco 2022 data privacy benchmark study. In Cisco. https://www.cisco.com/c/en/us/about/trust-center/data-privacy-benchmark-study.html
  • Culnan, M. J., & Williams, C. C. (2009). How ethics can enhance organizational privacy: Lessons from the Choicepoint and TJX data breaches. MIS Quarterly, 33(4), 673. https://doi.org/10.2307/20650322
  • Data (Use and Access) Act . (2025). Data (Use and Access) Act 2025. In Legislation.gov.uk. https://www.legislation.gov.uk/ukpga/2025/18
  • Dierickx, I., & Cool, K. (1989). Asset stock accumulation and sustainability of competitive advantage. Management Science, 35(12), 1504–1511.
  • Eisenhardt, K. M., & Martin, J. A. (2000). Dynamic capabilities: What are they? Strategic Management Journal, 21(10/11), 1105–1121. http://www.jstor.org/stable/3094429
  • Gal, M. S., & Aviv, O. (2020). The competitive effects of the GDPR. Journal of Competition Law & Economics, 16(3). https://doi.org/10.1093/joclec/nhaa012
  • UK. (2018). Data protection act 2018. In Legislation.gov.uk. GOV.UK. https://www.legislation.gov.uk/ukpga/2018/12
  • (2024, August 10). Privacy governance report 2024 – executive summary. In Iapp.org. https://iapp.org/resources/article/privacy-governance-report
  • Johnson, G. A., Shriver, S. K., & Goldberg, S. G. (2023). Privacy and market concentration: Intended and unintended consequences of the GDPR. Management Science, 69(10). https://doi.org/10.1287/mnsc.2023.4709
  • Martin, K. D., Borah, A., & Palmatier, R. W. (2017). Data privacy: Effects on customer and firm performance. Journal of Marketing, 81(1), 36–58. https://doi.org/https://doi.org/10.1509/jm.15.0497
  • Martin, K. D., & Murphy, P. E. (2017). The role of data privacy in marketing. Journal of the Academy of Marketing Science, 45(2), 135–155. https://doi.org/https://doi.org/10.1007/s11747-016-0495-4
  • (2024, January 4). Data quality trends for 2024. Precisely. https://www.precisely.com/blog/data-quality/2024-data-quality-trends/
  • Presidente, G., & Frey, C. B. (2022). The GDPR EFFECT: How data privacy regulation shaped firm performance globally. In CEPR. https://cepr.org/voxeu/columns/gdpr-effect-how-data-privacy-regulation-shaped-firm-performance-globally
  • Priem, R. L., & Butler, J. E. (2001). Is the resource-based “view” a useful perspective for strategic management research? Academy of Management Review, 26(1), 22–40. https://doi.org/10.5465/amr.2001.4011928
  • Rasoulian, S., Grégoire, Y., Legoux, R., & Sénécal, S. (2021). The effects of service crises and recovery resources on market reactions: An event study analysis on data breach announcements. Journal of Service Research, 26(1), 109467052110369. https://doi.org/10.1177/10946705211036944
  • Schilke, O. (2014). On the contingent value of dynamic capabilities for competitive advantage: The nonlinear moderating effect of environmental dynamism. Strategic Management Journal, 35(2), 179–203. https://doi.org/10.1002/smj.2099
  • Schilke, O., Hu, S., & Helfat, C. E. (2018). Quo vadis, dynamic capabilities? A content-analytic review of the current state of knowledge and recommendations for future research. Academy of Management Annals, 12(1), 390–439. https://doi.org/10.5465/annals.2016.0014
  • Smith, H. J., Dinev, T., & Xu, H. (2011). Information privacy research: An interdisciplinary review. MIS Quarterly, 35(4), 989–1015. https://doi.org/10.2307/41409970
  • Teece, D. J. (2007). Explicating dynamic capabilities: The nature and microfoundations of (sustainable) enterprise performance. Strategic Management Journal, 28(13), 1319–1350. https://doi.org/https://doi.org/10.1002/smj.640
  • Teece, D. J., Pisano, G., & Shuen, A. (1997). Dynamic capabilities and strategic management. Strategic Management Journal, 18(7), 509–533. https://www.jstor.org/stable/3088148
  • Wernerfelt, B. (1984). A resource-based view of the firm. Strategic Management Journal, 5(2), 171–180

Share your valuable work from Social Media Buttons