Does personal data protection matter for ISO 9001 certification and firm performance?

Efrosini Siougle, Sophia Dimelis () and Nikolaos Malevris

International Journal of Productivity and Performance Management, 2023, vol. 73, issue 3, 749-774

Abstract: Purpose - This study explores the link between ISO 9001 certification, personal data protection and firm performance using financial balance sheet and survey data. The security aspect of data protection is analyzed based on the major requirements of the General Data Protection Regulation and mapped to the relevant controls of the ISO/IEC 27001/27002 standards. Design/methodology/approach - The research analysis is based on 96 ISO 9001–certified and non-certified publicly traded manufacturing and service firms that responded to a structured questionnaire. The authors develop and empirically test their theoretical model using the structural equation modeling technique and follow a difference-in-differences econometric modeling approach to estimate financial performance differences between certified and non-certified firms accounting for the level of data protection. Findings - The estimates indicate three core dimensions in the areas of “policies, procedures and responsibilities,” “access control management” and “risk-reduction techniques” as desirable components in establishing the concept of data security. The estimates also suggest that the data protection level has significantly impacted the performance of certified firms relative to the non-certified. Controlling for the effect of industry-level factors reveals a positive relationship between data security and high-technological intensity. Practical implications - The results imply that improving the level of compliance to data protection enhances the link between certification and firm performance. Originality/value - This study fills a gap in the literature by empirically testing the influence of data protection on the relationship between quality certification and firm performance.

Keywords: ISO 9001 certification; Firm performance; GDPR; Personal data security; Structural equation modeling; Difference-in-Differences; K00; L15; L25 (search for similar items in EconPapers)
Date: 2023
References: Add references at CitEc
Citations:

Downloads: (external link)
https://www.emerald.com/insight/content/doi/10.110 ... d&utm_campaign=repec (text/html)
https://www.emerald.com/insight/content/doi/10.110 ... d&utm_campaign=repec (application/pdf)
Access to full text is restricted to subscribers

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:eme:ijppmp:ijppm-07-2022-0345

DOI: 10.1108/IJPPM-07-2022-0345

Access Statistics for this article

International Journal of Productivity and Performance Management is currently edited by Dr Luisa Huatuco and Dr Nicky Shaw

More articles in International Journal of Productivity and Performance Management from Emerald Group Publishing Limited
Bibliographic data for series maintained by Emerald Support ().