Creating a Culture of Data Protection

Karla Lellis, Adjunct Professor, Data Privacy Compliance at State University of New York at Oswego

Karla Lellis is a distinguished tech law expert specializing in Data Privacy, Cybersecurity and Information Policy. Currently pursuing her S.J.D. at Syracuse University with a focus on Cybersecurity Class Actions, she brings a global perspective shaped by her experience as a compliance officer across Latin America. As an adjunct professor, Karla combines rigorous research with practical insights, equipping students with essential skills to navigate the rapidly evolving legal landscapes in technology and data privacy.

The Role of Education in Enhancing Security for Citizens and Organizations

The global average cost per data breach has increased from $4.45 million in 2022 to $4.88 million in 2023 (Statista). Cyberattacks continue to grow, with 2,365 incidents affecting over 343 million victims in 2023 - a 72% increase since 2021 (Forbes). Comprehensive data privacy regulations have been implemented worldwide, including GDPR in Europe, LGPD in Brazil and various laws in 20 U.S. states (Bloomberg Law).

Given these regulations, education on data privacy is increasingly critical to creating a culture of awareness and responsibility. Educating diverse demographics - students, professionals and older adults - can help mitigate risks and improve compliance.

Data Protection vs. Data Security

While often used interchangeably, data protection and security serve distinct functions. Data security focuses on technical safeguards—like encryption and firewalls—that prevent unauthorized access. Data protection includes technical measures and policies governing data handling throughout its lifecycle. It emphasizes compliance with legal standards, ethical data practices and individual privacy rights.

“Encouraging critical thinking and ethical responsibility, higher education institutions contribute significantly to building a knowledgeable, privacy-conscious workforce and promoting a data protection culture beyond academia.”

The Role of Culture in Data Protection

Data protection practices differ globally due to cultural, historical and political factors. Europe treats data protection as a fundamental right, while the Asia-Pacific region ranges from strict regulations in Singapore to limited oversight in India. Africa shows similar diversity, with some countries enforcing comprehensive rules and others lacking protections.

In the U.S., public concern about data usage is growing. According to the Pew Research Center, 67% of Americans report a limited understanding of how companies use their data and 79% express concern about how personal data is handled.

The Role of Education in Data Protection

Education is critical to promoting a data privacy culture. For younger generations, interactive learning tools—such as games, case studies, quizzes and real-world exercises—can make data privacy engaging and relatable. Older adults also need targeted programs; in 2023, Americans aged 60 and older filed over 17,000 complaints about tech-related fraud, with many incidents involving data breaches (Statista).

Specialized Programs for Different Demographics

Educational initiatives tailored to specific age groups help meet diverse needs. In Europe, the Erasmus+ DataPro project educates school students on data protection, empowering them to make informed digital decisions. Another European initiative, "Data Protection Goes to School," targets students aged 9-18. These programs demonstrate Europe's commitment to building a solid data privacy foundation.

In Australia, the Office of the Australian Information Commissioner's "Digital Citizenship - Privacy Matters" program educates primary and secondary school students on privacy and digital literacy, focusing on safe online behavior.

Programs for older adults are equally important. Singapore's "Digital for Life" program teaches privacy basics to seniors, while Canada's "Privacy for Seniors" initiative raises privacy awareness among citizens aged 65 and above.

Effective educational materials that resonate with each demographic is essential for building a sustainable data privacy culture.

Higher Education's Contribution to Promote Data Privacy Culture

Higher education institutions play a vital role in advancing data privacy culture by integrating data protection into curricula across disciplines. Universities increasingly offer specialized courses, certifications and research opportunities on data privacy, cybersecurity and digital ethics. These programs prepare students to navigate data protection in their personal lives and drive data privacy initiatives in their future careers. By encouraging critical thinking and ethical responsibility, higher education institutions contribute significantly to building a knowledgeable, privacy-conscious workforce and promoting a data protection culture beyond academia.

Continuous Learning and Awareness

Creating a data privacy culture requires continuous education. Practice courses ensure that people remain informed about the latest practices and security measures, reinforcing their roles in protecting sensitive information. Organizations should routinely emphasize data privacy's importance, fostering shared responsibility across stakeholders and contributing to a robust data protection culture.

Practical Engagement and Community Involvement

Community involvement through interactive activities can make data privacy education more impactful. For example, escape games tailored to data protection have proven effective in teaching families and children about privacy in a fun and memorable way, reinforcing key concepts and promoting vigilance regarding personal data.

Building Digital Citizenship and Privacy Awareness

Incorporating digital citizenship and privacy awareness into educational curricula equips individuals with the skills to navigate the digital world responsibly. Understanding how data is collected, shared and protected enables people to manage their online presence and appreciate the broader implications of data collection.

Conclusion

Fostering a data privacy culture requires tailoring education programs to different demographics and emphasizing continuous learning. This empowers individuals to make informed choices and encourages responsible data practices. A robust privacy culture benefits both individuals and organizations.

Data Security

Legal

Fraud