Towards an Information Privacy and Personal Data Protection Competency Model for Citizens

This paper aims to investigate the competencies that citizens should hold to protect own information privacy and personal data. Based on conceptual analysis, this study examines theoretical frameworks on competency models (e.g., the Iceberg Competency Model) and proposes a roadmap for developing the first information privacy competency model in the information systems literature. The study conducts a systematic analysis to reveal the lack of information privacy competency models in the literature and derive any reported information privacy competencies. In sequence, synthesizes the results into a preliminary information privacy competency model comprising attributes that citizens should hold to be competent to protect own information privacy and personal data, including knowledge, skills, attitudes, values, etc. The results of this work can be valuable for information privacy researchers, online service providers, policy makers and educators.