Submit your papersSubmit Now
For Enquiries: [email protected]
IIARD LogoIIARD

Toward a Conceptual Framework for Embedding Privacy by Design in Corporate Restructuring and Transaction Structuring

Michael Ominyi

Abstract

Privacy regulation has matured from a narrow compliance obligation into a structural design requirement, yet the practice of corporate restructuring, mergers, acquisitions, divestitures, and joint venture formation continues to treat data protection largely as a post signing compliance task rather than a factor that shapes deal architecture itself. This paper develops a conceptual framework for embedding privacy by design principles directly into the structuring of corporate transactions, spanning pre deal screening, due diligence, documentation, interim period management, and post-closing integration. Drawing on the seven foundational principles of privacy by design, the accountability requirements of Article 25 of the General Data Protection Regulation, comparative international privacy regimes, and transaction cost and agency theoretic perspectives on organizational design, the framework proposes seven cross cutting dimensions, data inventory and mapping, legal basis and consent portability, data architecture and technical separation, contractual risk allocation, governance and accountability transfer, cross border transfer mechanisms, and stakeholder transparency, that deal teams can apply at each stage of the transaction lifecycle. The paper further develops a maturity model for assessing organizational capability, a roles and responsibilities matrix for allocating ownership across the deal team, and a set of illustrative key performance indicators for monitoring adoption. The paper illustrates the framework's application across share and asset acquisitions, carve outs, joint ventures, cross border restructuring, private equity buyouts, and special purpose acquisition company transactions, and discusses implications for legal counsel, data protection officers, and boards of directors through three composite scenarios. The paper concludes by identifying limitations of a purely conceptual approach and proposing directions for empirical validation.

References

Akomolafe, O., & Agu, M. U. (2018). A conceptual model for enhancing internal audit quality through technology-enabled risk assessment frameworks. Iconic Research and Engineering Journals, 1(9), 458-475. Akomolafe, O., & Agu, M. U. (2019a). A conceptual framework for developing risk-based internal control models in the insurance and banking sectors. Iconic Research and Engineering Journals, 2(8), 335-354. Akomolafe, O., & Agu, M. U. (2019b). A review of data-driven risk evaluation models for emerging market financial institutions. Iconic Research and Engineering Journals, 3(6), 433-448. Akomolafe, O., & Agu, M. U. (2019c). Advances in financial resilience through integrated governance and compliance strategies. Iconic Research and Engineering Journals, 2(10), 607-620. Atakpa, M. I. (2021). A review of predictive analytics models for anti-money laundering detection in commercial banking systems. International Journal of Scientific Research in Computer Science, Engineering and Information Technology, 7(2), 778-804. https://doi.org/10.32628/CSEIT2064813 Badmus, O., Dosunmu, A. A., & Ozowara, D. E. (2019b). A governance framework for Salesforce platform management in regulated healthcare environments. Iconic Research and Engineering Journals, 3(6). California Consumer Privacy Act of 2018, Cal. Civ. Code § 1798.100 et seq., as amended by the California Privacy Rights Act of 2020. Cavoukian, A. (2009). Privacy by design: The 7 foundational principles. Information and Privacy Commissioner of Ontario, Canada. Coase, R. H. (1937). The nature of the firm. Economica, 4(16), 386-405. Court of Justice of the European Union. (2020). Data Protection Commissioner v. Facebook Ireland Ltd and Maximillian Schrems, Case C-311/18 (Schrems II). Dada, T., Isiekwu, C. P., & Oluwo, K. (2021a). Advances in multinational cash flow consolidation and FX risk control using tiered treasury architecture. Iconic Research and Engineering Journals, 4(11), 601-620. https://doi.org/10.64388/IREV4I11-1714351 Dosunmu, A. A., & Ogundele, P. O. (2019). Security audit and enterprise risk assessment frameworks for resilient information systems. Iconic Research and Engineering Journals, 3(5), 434-447. https://doi.org/10.64388/IREV3I5-1713225 European Data Protection Board. (2020). Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data. Eyetsemitan, R. A., Ambali, K. B., Oyeleye, A. O., & Fadayomi, O. (2020). Multi-stakeholder governance alignment in joint venture operations: A conceptual framework for coordinating business processes in highly regulated environments. Iconic Research and Engineering Journals, 4(4), 418-441. https://doi.org/10.64388/IREV4I4-1716955 Eyetsemitan, R. A., Ambali, K. B., Oyeleye, A. O., & Fadayomi, O. (2021). Translating tax and regulatory requirements into SME compliance workflows: A conceptual framework for implementing IAS 12, VAT, PAYE, and withholding tax. Iconic Research and Engineering Journals, 4(11), 621-641. https://doi.org/10.64388/IREV4I11-1716956 Information Commissioner's Office (United Kingdom). (2020). Enforcement action and monetary penalty notice concerning Marriott International, Inc. www.iiardpub.org International Organization for Standardization. (2017). ISO/IEC 29134:2017, Information technology, Security techniques, Guidelines for privacy impact assessment. Isiekwu, C. P., Oluwo, K., & Dada, T. (2021). A conceptual model for CFO-led strategic finance in joint venture and cross-border partnerships. Iconic Research and Engineering Journals, 4(7), 383-400. https://doi.org/10.64388/IREV4I7-1714350 Jensen, M. C., & Meckling, W. H. (1976). Theory of the firm: Managerial behavior, agency costs and ownership structure. Journal of Financial Economics, 3(4), 305-360. Ladapo, O. O., Dosunmu, A. A., Jooda, D., & Abolaji, T. O. (2018). Lessons learned from offline assessment of security-critical systems: The case of Microsoft Active Directory. Iconic Research and Engineering Journals, 2(6), 277-299. https://doi.org/10.64388/IREV2I6- 1717205 Lawal, O. A., & Oduleye, T. E. (2018b). A review and conceptual framework for tax governance and cross-border compliance analytics. Iconic Research and Engineering Journals, 2(5). Lawal, O. A., & Oduleye, T. E. (2019a). A conceptual risk assessment model for transfer pricing in multinational corporations. Iconic Research and Engineering Journals, 2(12). Lei Geral de Proteção de Dados Pessoais , Law No. 13,709/2018 . Mbonu, I. S., Aliliele, C., Iwuanyanwu, U., & Oluoha, O. M. (2018). A conceptual framework for legal and ethical risk modeling in enterprise data protection governance systems. Iconic Research and Engineering Journals, 2(2), 207-226. https://doi.org/10.64388/IREV2I2- 1714911 Mbonu, I. S., Aliliele, C., Iwuanyanwu, U., & Uzoka, E. (2020). A review of identity and access management integration strategies in hybrid and multi cloud environments. International Journal of Multidisciplinary Research and Growth Evaluation, 1(5), 795-810. https://doi.org/10.54660/.IJMRGE.2020.1.5.795-810 Mbonu, I. S., Aliliele, C., Uzoka, E., & Oluoha, O. M. (2019). A review of comparative data protection regulations and secure cloud implementation strategies across jurisdictions. Iconic Research and Engineering Journals, 2(9), 482-501. https://doi.org/10.64388/IREV2I9-1714912 Mbonu, I. S., Iwuanyanwu, U., Aliliele, C., & Uzoka, E. (2020a). A conceptual framework for agile supply chain digital transformation with embedded IT risk and ISO compliance controls. Iconic Research and Engineering Journals, 3(11), 566-593. https://doi.org/10.64388/IREV3I11-1714916 Mbonu, I. S., Iwuanyanwu, U., Aliliele, C., & Uzoka, E. (2020b). Advances in infrastructure as code governance for secure terraform based enterprise cloud deployments. International Journal of Multidisciplinary Research and Growth Evaluation, 1(5), 811-828. https://doi.org/10.54660/.IJMRGE.2020.1.5.811-828 Mbonu, I. S., Iwuanyanwu, U., Aliliele, C., & Uzoka, E. (2021). A review of VoIP forensic analytics models for financial fraud detection and regulatory compliance monitoring. International Journal of Multidisciplinary Research and Growth Evaluation, 2(6), 711-730. https://doi.org/10.54660/.IJMRGE.2021.2.6.711-730 National Institute of Standards and Technology. (2020). NIST privacy framework: A tool for improving privacy through enterprise risk management, Version 1.0. U.S. Department of Commerce. Ogbole, J. I., Okoruwa, P. O., Fadayomi, O., Abolaji, T. O., Edivri, J., & Akeju, B. (2021). Conceptual model for identity-centric zero trust architecture in enterprise security www.iiardpub.org governance. International Journal of Scientific Research in Computer Science, Engineering and Information Technology, 7(5), 393-415. https://doi.org/10.32628/IJSRCSEIT217562 Okoruwa, P. O., Fadayomi, O., Akeju, B., Edivri, J., Ogbole, J. I., & Abolaji, T. O. (2020). Conceptual model for privacy-centric security engineering in digital and cloud computing systems. International Journal of Scientific Research in Computer Science, Engineering and Information Technology, 7(5), 371-389. Personal Information Protection Law of the People's Republic of China (2021). Protection of Personal Information Act 4 of 2013 (South Africa). Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation), Article 25. United Kingdom Data Protection Act 2018, incorporating the UK General Data Protection Regulation following the United Kingdom's withdrawal from the European Union. Williamson, O. E. (1985). The economic institutions of capitalism: Firms, markets, relational contracting. Free Press.

More Articles from JOURNAL OF ACCOUNTING AND FINANCIAL MANAGEMENT