Skip to main content
Kent Academic Repository

Supporting Small and Medium-sized Enterprises in using Privacy Enhancing Technologies

Bada, Maria, Furnell, Steven, Nurse, Jason R. C., Dymydiuk, Jason (2023) Supporting Small and Medium-sized Enterprises in using Privacy Enhancing Technologies. In: HCI for Cybersecurity, Privacy and Trust. HCI for Cybersecurity, Privacy and Trust. Lecture Notes in Computer Science . Springer ISBN 978-3-031-35821-0. E-ISBN 978-3-031-35822-7. (doi:10.1007/978-3-031-35822-7_19) (KAR id:100198)


Small and Medium-sized Enterprises (SMEs) are a critical element of the economy in many countries, as well as being embedded within key and critical supply chains alongisde larger organisations. Typical SMEs are data- and technology-dependent, but many are nonetheless ill-equipped to protect these areas. This study aims to investigate the extent to which SMEs currently understand and use Privacy Enhancing Technologies (PETs), and how they could be supported to do so more effectively given their potential constraints in terms of understanding, skills and capacity to act. This was studied via a mixed method approach collecting qualitative and quantitative data. Survey responses from 239 participants were collected and 14 interviews conducted. Participants were SME owners as well as experts working with SMEs. The findings clearly demonstrate that SMEs generally tend not to think about privacy, and if they do so it is mainly because of risk, potentially after a cyber attack, with the main drivers for implementing privacy being the potential of being fined by regulators, reputational damage, the demands of customers, and legal or regulatory compliance. The main reasons for the lack of attention are lack of skills and necessity. On this basis, the findings were taken forward to inform the initial design of an SME Privacy Starter Pack, which aims to assist SMEs in understanding that privacy and PETs are relevant to them and their industry in a simple and facilitated manner.

Item Type: Conference or workshop item (Paper)
DOI/Identification number: 10.1007/978-3-031-35822-7_19
Uncontrolled keywords: Small business, SMEs, Privacy, PETs, Data protection
Subjects: B Philosophy. Psychology. Religion > BF Psychology
H Social Sciences > H Social Sciences (General)
Q Science
T Technology
Divisions: Divisions > Division of Computing, Engineering and Mathematical Sciences > School of Computing
University-wide institutes > Institute of Cyber Security for Society
Depositing User: Jason Nurse
Date Deposited: 23 Feb 2023 15:53 UTC
Last Modified: 21 Sep 2023 11:24 UTC
Resource URI: (The current URI for this page, for reference purposes)

University of Kent Author Information

  • Depositors only (login required):

Total unique views for this document in KAR since July 2020. For more details click on the image.