MIDDLETOWN, Pa. — Renee Flasher, associate professor of accounting at Penn State Harrisburg, spent the summer in Portugal researching global data privacy regulations as a Fulbright Scholar, an experience she said had a lasting effect on her both professionally and personally.
Flasher was one of 12 Penn State faculty members to receive a Fulbright Scholar Award for 2024-25, which allowed her to travel to ISCTE – University Institute of Lisbon, Business Research Unit, in Lisbon, Portugal, from May through August.
“My Fulbright research experience was transformational through the growth resulting from focusing on one subject area, learning about a new culture intimately, and adjusting to life in a different country,” Flasher said. “The privilege of being an ambassador for the country and University abroad was an honor. I look forward to living up to the higher ideals behind the Fulbright as I continue my professional journey.”
Flasher’s research focused on General Data Protection Regulation enforcement.
The European regulations were one of the first comprehensive, multi-country regulations issued around data privacy that are applicable to any company doing business in the European Union or storing data concerning any European person. The regulations address an individual’s right to see, change or request their information be deleted. They also require companies to explain why and how they will use any of the data they collect from each individual.
“The time over there was great for gathering the data, for understanding really what I was gathering and the limits to what I could infer and say about the data,” she said. Since she returned, she’s been delving deeper into the data and enforcement patterns. The initial results from the work were accepted for presentation at the American Accounting Association’s 2026 Forensic Accounting Section Research Conference, which will take place in March in Montclair, New Jersey.
The time in Portugal helped Flasher gain more understanding of why and how the data privacy laws are developed, she said.
“In this case, it was understanding the principles around which they’re doing that and to understand how much they believe that data privacy is a human value, and that you really should have the ability to minimize the amount of data out there,” Flasher said. “You should have the right to be able to delete yourself … and people should be held accountable for holding your data and using it in only ways that you have explicitly consented.”