Enhancing Information Governance with Enterprise Architecture Management: Design Principles Derived from Benefits and Barriers in the GDPR Implementation

Businesses today are increasingly dependent on how they transform information into economic value, while simultaneously being compliant with intensified privacy requirements, resulting from legal acts like the General Data Protection Regulation (GDPR). As a consequence, realizing information governance has become a topic more important than ever to balance the beneficial use and protection of information. This paper argues that enterprise architecture management (EAM) can be a key to GDPR implementation as one important domain of information governance by providing transparency on information integration throughout an organization. Based on 24 interviews with 29 enterprise architects, we identified a multiplicity of benefits and barriers within the interplay of EAM and GDPR implementation and derived seven design principles that should foster EAM to enhance information governance.

[1]  E. M. Hartwell.  Boston , 1906 .

[2]  Dirk Stelzer,et al.  Enterprise Architecture Principles: Literature Review and Research Directions , 2009, ICSOC/ServiceWave Workshops.

[3]  Paul P. Tallon,et al.  The Information Artifact in IT Governance: Toward a Theory of Information Governance , 2013, J. Manag. Inf. Syst..

[4]  S. Elo,et al.  Qualitative Content Analysis , 2014 .

[5]  T. Hulme,et al.  Information Governance: Sharing the IBM approach , 2012 .

[6]  Carol V. Brown,et al.  Designing data governance , 2010, CACM.

[7]  W. V. Grembergen.  IT Governance and Its Mechanisms , 2004 .

[8]  Sandeep Purao,et al.  Action Design Research , 2011, MIS Q..

[9]  Robert Winter,et al.  Essential Layers, Artifacts, and Dependencies of Enterprise Architecture , 2006, 2006 10th IEEE International Enterprise Distributed Object Computing Conference Workshops (EDOCW'06).

[10]  Alan R. Hevner,et al.  Design Research in Information Systems , 2010 .

[11]  Rik Maes,et al.  International Journal of Information Management on the Governance of Information: Introducing a New Concept of Governance to Support the Management of Information , 2022 .

[12]  Samir Chatterjee,et al.  A Design Science Research Methodology for Information Systems Research , 2008 .

[13]  Henderik Alex Proper,et al.  Architecture Principles - The Cornerstones of Enterprise Architecture , 2011, The Enterprise Engineering Series.

[14]  Johnny Saldaña,et al.  The Coding Manual for Qualitative Researchers , 2009 .

[15]  Fereidoon Shams Aliee,et al.  Enterprise information security, a review of architectures and frameworks from interoperability perspective , 2011, WCIT.

[16]  Michail N. Giannakos,et al.  Information Governance in the Big Data Era: Aligning Organizational Capabilities , 2018, HICSS.

[17]  Ingrid Schirmer,et al.  A Privacy-driven Enterprise Architecture Meta-Model for Supporting Compliance with the General Data Protection Regulation , 2019, HICSS.

[18]  Juerg Hagmann,et al.  Information governance – beyond the buzz , 2013 .

[19]  Antonio Carlos Gastaud Maçada,et al.  Information Governance Framework: The Defense Manufacturing Case Study , 2013, AMCIS.

[20]  Boris Otto,et al.  One Size Does Not Fit All---A Contingency Approach to Data Governance , 2009, JDIQ.

[21]  Stephen H. Kaisler,et al.  15 Years of Enterprise Architecting at HICSS: Revisiting the Critical Problems , 2017, HICSS.

[22]  Robert Wayne Gregory,et al.  Design Principles for Heterogeneity Decisions in Enterprise Architecture Management , 2012, ICIS.

[23]  Leon A. Kappelman,et al.  The 2016 SIM IT Issues and Trends Study , 2019, MIS Q. Executive.

[24]  Richard Baskerville,et al.  Going back to basics in design science: from the information technology artifact to the information systems artifact , 2015, Inf. Syst. J..

[25]  Shirley Gregor,et al.  The Nature of Theory in Information Systems , 2006, MIS Q..

[26]  Stephan Aier,et al.  Implementing Architectural Thinking - A Case Study at Commerzbank AG , 2015, CAiSE Workshops.

[27]  Florian Matthes,et al.  ORGANIZATIONAL FACTORS INFLUENCING ENTERPRISE ARCHITECTURE MANAGEMENT CHALLENGES , 2013 .

[28]  Gary W. Dickson,et al.  A Principles-Based Enterprise Architecture: Lessons from Texaco and Star Enterprise , 1990, MIS Q..

[29]  Michael D. Myers,et al.  The qualitative interview in IS research: Examining the craft , 2007, Inf. Organ..