Between Promise and Practice: Challenges and Misperceptions of Applying Privacy Enhancing Technologies in Business Contexts
Abstract
Applying privacy-enhancing technologies (PETs), such as homomorphic encryption or differential privacy, promises to improve organizational cybersecurity strategies. However, in business contexts, significant gaps manifest between their technical capabilities and organizational perceptions, indicating a mismatch between promise and practice. This paper presents the first comprehensive meta-analysis of organizational PET perceptions through a systematic review of 34 empirical studies. Our findings reveal that while regulatory pressures and reputational considerations drive adoption, organizations face substantial practical challenges, including complexity management and insufficient understanding of technological capabilities. Even experienced practitioners show misperceptions about PET functionality, leading to misconfigurations that undermine promised privacy benefits. Thus, misperceptions directly impact cybersecurity effectiveness, as organizations may overestimate deployed protections or underutilize available capabilities. Consequently, our analysis highlights the need for and recommends implementing improved education, regular reassessments of current beliefs regarding PETs, and transparency mechanisms to translate potential into successful enterprise cybersecurity.
Authors 5
-
Johannes Lohmöller Aachen
Affiliation as printed
RWTH Aachen University
-
Hajeong Jeon Aachen
Affiliation as printed
RWTH Aachen University
-
Jael Hentschel Aachen
Affiliation as printed
RWTH Aachen University
-
Klaus Wehrle Aachen
Affiliation as printed
RWTH Aachen University
-
Jan Pennekamp Aachen
Affiliation as printed
RWTH Aachen University
Cited by 1 stored of 1
1 result
No patents citing this paper on Lens.org (checked 2026-10-06).