An approach towards data protection literacy at microenterprises using storytelling and gamification

The huge volume of information processed mechanically and instantaneously increased a global interest on data protection regulations to ensure the proper use of information and protection for individuals and companies. Considering that there is a high risk of inappropriate usage or unauthorized access of information if employees do not understand how to protect and maintain confidentiality of customers’ data, it is crucial to have a data protection literacy. Nevertheless, findings showed that data protection literacy, focused on an employees’ abilities to fairly, lawful and transparently handle personal data has not been developed in the literature. Further, formal training is often neglected in microbusinesses, which represents the majority of Swiss companies, playing an important role in the Swiss economy. With the increasement of data protection regulations, employees of microbusiness are facing the challenge to have a minimum understanding on these matters. There are independent courses online on how a company can comply to the General Data Protection Regulation, however, there is a lack of trainings that also consider the Swiss data protection regulation. Also, some methods used can be seen as a passive and monotonous activities, which may not engage employees....