Page - 102 - in Digital Entrepreneurship - Impact on Business and Society

subject,while data security is primarily considered from theperspectiveof the data processor andowner (Bühler et al. 2019).Data security is thus aimedat IT systems and therefore at the technical component of digital services, while data protection refers tostoredcontentandhencethelegalcomponent.Thelatter isusuallyregulated byspecificdirectives suchas theEuropeanDataProtectionRegulation (GDPR)and must be implemented by intermediaries or organisations involved in online con- sulting. The former, however, requires consideration because of the relevance of blockchain technology for digital consulting platforms. Inorder to securely archive long-termdata indigital form(Hackel andRoßnagel 2008), it is possible to work with local systems, i.e. software installed on local computers and/or storage on individual data carriers. Modern working environ- ments, on the other hand, use certain cloud systems as a de facto standard. The advantage is, above all, the ability to work independently of time, location and device, aswell as collaborativeworkdue to theconstant availabilityof theowing to its storage on servers that are usually provided externally. These are usually operated in computer centres, which in turn are specialised in their operation, administration, security and access protection as a business model. Hardware acquisition andmaintenance are therefore no longer necessary if external services are used; the services provided can be easily adapted to the organisational devel- opment and, if necessary, several existing or newcompany locations can be easily integrated; SaaSmodels for, for example, specific CRMsystems for documenting customer contacts also allow reliable cost calculation based onmonthly invoices. The only requirement for its use is sufficiently fast Internet access. Employees are then given access to thefiles relevant to their work, which can sometimes also be edited collectively. The points mentioned above already show that not only clients must have confidence in the provider in order to use it, but also the management of the organisation itself must trust in cloud providers with regard to data security, sovereignty, access andprocessing aswell as storage location,maintenance, failure protectionandsoon (WalterbuschandTeuteberg2012;Buchet al. 2014;Backhaus andThüring 2015),which provide and ensure the technological basis for thework on the client. In addition, dependence on the cloud or SaaS provider also has a significant impact, as non-compliance with data protection and security standards ultimately falls back on the institution. This can not only result in image problems but also sometimes lead to immense downtime costs in the event of the cloud provider’s insolvency. The current practice of data processing and the reasons mentioned above motivate entrepreneurs and their teams, as same as individuals to think about alternatives and/or possible solutions. Trust in centralised systems can be created, for example, through anonymisation (e.g. through onion routing, as in the TOR service), encryption technologies (Schulz 2016; Petrlic 2017), digital signatures (Kumbruck 2000; Bertsch 2002), VPN connections and/or legally and audit-proof archiving (Hackel and Roßnagel 2008). In addition to these instruments, the blockchainalso serves to increasenotonlydata security,but alsodataprotection, as described in the following section. 106 S. Gerth and L. Heim