Impacts of the New General Data Protection Regulation for Small- and Medium-Sized Enterprises

Abstract

The European General Data Protection Regulation (GDPR) implies a lot of new regulations. The implementation of these new regulations is a major challenge for many small- and medium-sized enterprises (SMEs). Therefore, we investigated which factors influence the implementation of the GDPR in already existing business models for SMEs. Our model is focusing on already existing business models for SMEs. It is based on empirical data from German experts. It has been developed by using clustering and qualitative content analysis. Important influencing factors that are now open for quantitative verification are know-how, expenditure of time, uncertainty, costs, provision of information and process adaption.