Consumers have various privacy expectations, but organisations do not always seem to meet it. This is critical in an age where data privacy legislation such as the GPDR or POPIA regulates processing of personal information. Organisations must ensure that they comply, but also that consumer privacy expectations are met. The privacy culture in a country, organisation or social group must also be understood and integrated in compliance plans.

Da Veiga holds a Phd IT in information security culture with a CISA and CIPT certification. She is also a Certified Ethics Officer and has published in a number of accredited journals and conference proceedings. She has been working in academia since 2014 after 13 years in industry.