## 6 Discussion
### Implications of the Study  
In the broader context, this research highlights the critical importance of organisations adhering to privacy regulations and developing comprehensive privacy policies. This study shows the prevalent challenges within privacy policies, where the absence of technical guidance can inadvertently lead to privacy breaches. To address this pressing issue, this research studied the concept of industrial privacy frameworks, which offer organisations invaluable technical guidelines and best practices that can be customised to their specific needs. These frameworks not only ensure compliance with legal mandates but also effectively mitigate the risk of unintentional privacy breaches. However, a notable shortcoming of these frameworks is their lack of specificity in recommending particular privacy-protection methods. For example, methods like differential privacy, a standard privacy preservation method used by tech giants such as Google [66] and Apple [67] to anonymise data before it reaches their servers, are not explicitly discussed. Differential privacy is a crucial technology in the current data-centric environment, providing a mathematical guarantee of individual privacy while allowing for the collection of useful aggregation of data. Its absence in the guidance provided by frameworks like NIST points to a gap in addressing the practical implementation of advanced privacy-preserving techniques. This study highlights the need for organisations to go beyond legal compliance with privacy regulations and to develop comprehensive privacy policies addressing prevalent challenges. It reveals that privacy policies often focus on regulatory compliance but lack technical depth, leading to potential breaches. Adopting industrial privacy frameworks is proposed in this study because it offers crucial technical guidance and adaptable best practices to rectify existing strategy limitations. Moreover, this study emphasises the inadequacies of current privacy regulations and user awareness, advocating for more sophisticated, technically grounded privacy management. A case study demonstrates achieving a balance between regulatory compliance and effective data privacy management, showing how these frameworks' adaptable solutions can enhance organisational privacy protection and serve as a model for effective data privacy governance. This research serves as a pivotal link between regulatory compliance and pragmatic data privacy management, providing a tangible and adaptable solution to enhance privacy protection within organisations. In the context of the Facebook and Cambridge Analytica case, these findings align with the NIST privacy framework's emphasis on transparency, clear communication with users, and accountability, highlighting the framework's potential to address the privacy violations that occurred. An evaluation of the NIST and Five Safes privacy framework is demonstrated in Table 3. In our study, we conducted an analysis of the NIST and Five Safes privacy frameworks against the GDPR's key privacy regulation principles based on a thorough examination of official documents, articles and industry reports. The tabular formats in our paper are a synthesis of these findings, where the presence of a tick mark signifies that the framework addresses a specific principle. This approach was chosen to provide a clear, comparative overview and is reflective of the extensive review and discussion presented in our study.