Adverse effects of organizational security and privacy policies: How to prevent individuals’ resistant behavior

Abstract

In contemporary society, individuals are in an environment where it is fundamentally difficult to protect personal information. Individuals had to expose their personal information despite its being exploited without explicit consent from themselves. In the case of a web platform, individuals are hardly able to opt-out while recognizing the risk of privacy infringement. In the offline context, individual surveillance is also implemented in the name of public welfare. However, individuals might hardly secure their privacy under the implementation of privacy-infringing policies as they are weak in terms of bargaining power. In this case, these policies cannot be effectively implemented because they can provoke resistance of individuals who sacrificed their private rights. For this reason, this dissertation illuminated the individuals' resistance in the online/offline contexts. First, the study indicated that online platform users may provide false personal information, ultimately lowering the reliability of the entire web-platform ecosystem. In the following, the study proposed the corporate social responsibility of platform service providers as a possible solution for the contamination of the web-platform ecosystem. In addition, the second study implied that insiders can harm or leak the organization's assets when internal security policies would not guarantee the personal space of individual employees. Through these implications, this dissertation suggested that organizations, which have a greater bargaining power than individuals, should preemptively reduce the possibility of privacy infringement.