Dijous 11 de juny, el Dipòsit Digital no estarà operatiu de 15:00 a 17:00 h per tasques de manteniment. Disculpeu les molèsties.
El jueves 11 de Junio, el Dipòsit Digital no estará operativo de 15:00 a 17:00 h debido a tareas de mantenimiento. Disculpen las molestias.
Thursday, Jun 11th, the Digital Repository will be unavailable due to a system update.

Files

917928.pdf (2.38 MB)

Document type

Article

Version

Published version

Publication date

2025-12-01

Publication license

cc by (c) Smirnova, Yelena ; Travieso-Morales, Victoriano, 2025
Please use this identifier to cite or link to this item: https://hdl.handle.net/2445/226883

Tech startups and general data protection regulation: an empirical exploration of compliance challenges

Journal Title

Authors

Director/Tutor

Journal ISSN

Volume Title

Related resource

https://doi.org/10.1108/JSBED-09-2024-0495

Abstract

Purpose – This study investigates specific challenges that tech startups in Catalonia face in complying with the General Data Protection Regulation (GDPR) from the perspective of Technology-Organization-Environment (TOE) framework. It also examines how factors such as startup’s size, age, and sector influence compliance experiences. Design/methodology/approach – A mixed-methods approach was employed, combining survey data from 107 Catalonian tech startups with in-depth interviews with senior executives from three startups to provide qualitative insightsfor triangulation. GDPR compliance challenges were analysed using regression analysis and One-Way ANOVA. Findings – The results of the study underscore the interconnected nature of GDPR compliance challenges, revealing that staff training mediates the relationship between regulatory and technical complexities and compliance costs. While compliance costs, regulatory complexity, and technical complexity are viewed as significant challenges of equal importance, staff training is not considered a primary concern for Catalonian startups. Additionally,factorssuch asthe startup’ssize, age, and sectorsignificantly influence how these challenges are perceived and addressed, with smaller, younger, and non-tech startups experiencing greater difficulties. Research limitations/implications – Relatively smallsample size and geographic focus on Catalonia potentially limit generalizability of the findings. Practical implications – The findings have implications for startups, policymakers, and industry regulators, emphasizing the need for simplified regulatory guidance, accessible technical support, and tailored compliance training programs for startups. Originality/value – This study fills a literature gap by applying the TOE framework to explore regulatory adoption challenges by tech startups. It reveals how staff training mediatesthe effect of regulatory and technical complexities on compliance costs highlighting the role of organizational capabilities in regulatory adoption.

Subject

Protecció de dades, Catalunya, Empreses de base tecnològica

Subject (English)

Data protection, Catalonia, University-based new business enterprises

Citation

Collections

Articles publicats en revistes (Empresa)

Citation

SMIRNOVA, Yelena and TRAVIESO-MORALES, Victoriano. Tech startups and general data protection regulation: an empirical exploration of compliance challenges. Journal of Small Business and Enterprise Development. 2025. Vol. 32, num. 8, pags. 54-82. ISSN 1462-6004. [consulted: 11 of June of 2026]. Available at: https://hdl.handle.net/2445/226883

Export metadata

JSON - METS

Share record