Management model for information privacy controls in Higher Education Institutions

Abstract

This research focused on the fact that it is very important for Higher Education Institutions (HEIs) to protect the privacy of information, especially in this era where the use of personal and sensitive data is one of the greatest concerns. Taking this background into account, a management model was created for the control of information privacy that allows us to respond to the particular and unique challenges that HEIs have and may face when trying to protect the privacy of information assets. The research used a quantitative methodology and as a data collection instrument the survey with a representative population of 5 HEIs in Northeast Colombia, taking the 5 institutions as a sample. The purpose of the study was to evaluate professionals' perspectives on the effectiveness of current privacy controls at their institutions and determine whether a specific control model could be effective in improving information protection. The study found that although most HEIs had policies and procedures aimed at safeguarding data privacy, there were evident deficiencies in the implementation and enforcement of these measures. Common challenges reported by respondents included lack of resources, insufficient staff training, and ambiguity over responsibilities for privacy management. The findings reveal that a holistic and systematic approach including policies, procedures, as well as staff awareness and training is crucial to ensure data protection in this era of increasing digitalization within higher education environments