Towards a readiness model derived from critical success factors, for the general data protection regulation implementation in higher education institutions

Background: Present the relevance of study and highlights key points literature overview. Purpose: As May 25, 2018, General Data Protection Regulation (GDPR) has become mandatory for all organizations, public or private, that handle personal data European citizens, regardless their physical location. Higher education institutions (HEIs), namely universities, are no exception to this requirement and, as in many other HEIs begin process implementing GDPR without meeting minimum conditions necessary implementation. The purpose study, therefore, is present a model determine level readiness regarding implementation GDPR. Study design/methodology/approach: With objective designing new artefact GDPR, follows Design Science Research an approach be used build model, based on set 16 critical success factors (CSFs) previously determined. Findings/conclusions: A was designed, CSFs related HEIs. Limitations/future research: This area needs further development, through practical application allowing improvement measurement levels different CSFs. Practical implications: determined allows realize priori if they have giving useful indications organizational dimensions compose them where better performance ensure successful Originality/Value: far we know, first HEIs, being therefore contribution development area.