Research

Research brings together Fiona Chan’s core bodies of work, empirical research projects and analysis of real cases and organisational decisions. Together, they examine how organisations make decisions that affect people, where privacy risk is created, and what capability organisations need to intervene early enough to change outcomes across privacy, data and AI governance.

Core work

Privacy as a Decision Capability

How organisations make decisions that affect people, where privacy risk is created, and what allows privacy to change the outcome.

The Privacy Capability Framework

What an organisation needs to be capable of doing if privacy is to operate as a decision capability.

Designing the Privacy Operating Model

How decision rights, interfaces, accountability and escalation make that capability possible.

Research projects

  • Australian privacy labour market

    Where privacy, data and AI governance capability actually sits in the market, how demand is shifting, and what it means for the way organisations resource the work.

  • Governance vacuum

    How responsibility falls between privacy, data, AI, legal, risk and business teams when no one function owns the decision.

  • AI governance disclosures in the ASX50

    An examination of what Australia’s largest listed companies disclose about AI oversight, accountability and governance.