Regulatory Spillovers and Data Governance: Evidence from the GDPR

Christian Peukert,Stefan Bechtold,Michail Batikas,Tobias Kretschmer

DOI: https://doi.org/10.1287/mksc.2021.1339

2022-02-15

Marketing Science

Abstract:Privacy regulation by the European Union has had effects for websites beyond the European Union and lead to an increase in market concentration of web technology vendors

business

What problem does this paper attempt to address?

Privacy regulation and firm performance: Estimating the GDPR effect globally

Carl Benedikt Frey,Giorgio Presidente

DOI: https://doi.org/10.1111/ecin.13213

2024-03-06

Economic Inquiry

Abstract:This paper examines how privacy regulation shaped firm performance. Controlling for firm and country‐industry‐year unobserved characteristics, we compare the outcomes of firms at different levels of exposure to EU markets, before and after the enforcement of the General Data Protection Regulation (GDPR) in 2018. We find that the GDPR had the unintended consequence of harming the profitability of companies targeting European consumers through the cost channel. Technology firms experienced a 2.1% decline in profits, but not in sales. The GDPR increased extra expenses, added to firms wage bills, and accelerated patenting in GDPR‐related technology fields. The main burdens have been borne by smaller companies.

economics
The Impact of Privacy Laws on Online User Behavior

Julia Schmitt,Klaus M. Miller,Bernd Skiera

DOI: https://doi.org/10.48550/arXiv.2101.11366

2021-01-27

General Economics

Abstract:Policymakers worldwide draft privacy laws that require trading-off between safeguarding consumer privacy and preventing economic loss to companies that use consumer data. However, little empirical knowledge exists as to how privacy laws affect companies' performance. Accordingly, this paper empirically quantifies the effects of the enforcement of the EU's General Data Protection Regulation (GDPR) on online user behavior over time, analyzing data from 6,286 websites spanning 24 industries during the 10 months before and 18 months after the GDPR's enforcement in 2018. A panel differences estimator, with a synthetic control group approach, isolates the short- and long-term effects of the GDPR on user behavior. The results show that, on average, the GDPR's effects on user quantity and usage intensity are negative; e.g., the numbers of total visits to a website decrease by 4.9% and 10% due to GDPR in respectively the short- and long-term. These effects could translate into average revenue losses of $7 million for e-commerce websites and almost $2.5 million for ad-based websites 18 months after GDPR. The GDPR's effects vary across websites, with some industries even benefiting from it; moreover, more-popular websites suffer less, suggesting that the GDPR increased market concentration.
The Impact of the General Data Protection Regulation (GDPR) on Online Usage Behavior

Klaus M. Miller,Julia Schmitt,Bernd Skiera

2024-11-18

Abstract:Privacy regulations often necessitate a balance between safeguarding consumer privacy and preventing economic losses for firms that utilize consumer data. However, little empirical evidence exists on how such laws affect firm performance. This study aims to fill that gap by quantifying the impact of the European Union's General Data Protection Regulation (GDPR) on online usage behavior over time. We analyzed data from 6,286 websites across 24 industries, covering 10 months before and 18 months after the GDPR's enactment in 2018. Employing a generalized synthetic control estimator, we isolated the short- and long-term effects of the GDPR on user behavior. Our results show that the GDPR negatively affected online usage per website on average; specifically, weekly visits decreased by 4.88% in the first 3 months and 10.02% after 18 months post-enactment. At the 18-month mark, these declines translated into average revenue losses of about USD 7 million for e-commerce websites and nearly USD 2.5 million for ad-based websites. Nonetheless, the GDPR's impact varied across website size, industry, and user origin, with some large websites and industries benefiting from the regulation. Notably, the largest 10% of websites pre-GDPR suffered less, suggesting that the GDPR has increased market concentration.

General Economics
Data Privacy Regulation and Cross-Border E-Commerce

Jing Yan

DOI: https://doi.org/10.1007/s10663-024-09624-0

2024-01-01

Empirica

Abstract:The rise of big data in the global economy has altered the ways in which firms do international business. The digital revolution has also changed how international business is regulated. Personal information protection is one of the new challenging regulatory issues. In this study, we build a framework to discuss how data privacy regulation affects cross-border e-commerce. We show that data privacy regulation has four effects: the web traffic effect, the data collection effect, the advertising effect and the data sharing effect, all of which negatively affect cross-border e-commerce. We also demonstrate the heterogenous effects of data privacy regulation. Specifically, we argue that data privacy regulation has a stronger cross-border e-commerce reduction effect on countries with higher labor cost and marketing cost, and data privacy regulation has a larger negative effect on cross-border e-commerce for differentiated products than homogenous products. By empirically testing the impact of General Data Protection Regulation on cross-border e-commerce between 183 countries and European Union countries from 2015 to 2020, we confirm all the proposed hypotheses. There are few studies exploring specifically how data privacy regulation affects cross-border e-commerce. We contribute to the literatures by filling this gap. Our research results provide new insights for multinational companies and public policymakers on this globally important issue in the digital age.
Regulating Privacy Online: An Economic Evaluation of the GDPR

Samuel G. Goldberg,Garrett A. Johnson,Scott K. Shriver

DOI: https://doi.org/10.1257/pol.20210309

2024-02-01

Abstract:Modern websites rely on personal data to design better content and to market themselves. The European Union’s General Data Protection Regulation (GDPR) was intended to make access to such personal data more difficult, with the goal of protecting user privacy. We examine the GDPR's impact on website page views and revenue for 1,084 online firms using data from Adobe's website analytics platform. We find a reduction of 12 percent in both EU user website page views and website revenue recorded by the platform after the GDPR’s enforcement deadline. We decompose these GDPR effects into changes in real outcomes and changes to data recording, respectively. (JEL D83, K24, L51, L86, L88, M31, M37)

economics
The Brussels Effect: How the GDPR Conquered Silicon Valley

Simon Gunst,Ferdi De Ville

DOI: https://doi.org/10.54648/eerr2021036

2021-10-01

European Foreign Affairs Review

Abstract:In 2018, the Californian government adopted a new data protection framework. The flagship of this framework is the California Consumer Privacy Act (CCPA). As this new framework is widely considered to resemble the European Union’s (EU’s) General Data Protection Regulation (GDPR), this article intends to investigate whether the Brussels Effect could explain this resemblance. We apply process-tracing to test if the Brussels Effect causally connects the GDPR with the CCPA. The analysis is based on a careful evaluation of three sets of evidence. Firstly, privacy policies of Apple, Facebook, and Google are examined. Secondly, lobbying concerning the alignment of the implementation of the CCPA with the GDPR is scrutinized. Lastly, it is investigated whether the Californian government has used arguments linked to the Brussels Effect while drafting the CCPA and its subsequent implementing regulations. It is concluded that the Brussels Effect has indeed played a role in the adoption of the CCPA. Nevertheless, it has become clear that the impact of the Effect varies depending on exactly which provision of the GDPR is examined. Brussels Effect, process-tracing, California, CCPA, European Union, GDPR, Data Protection, Lobbying, Big Tech
Privacy Regulations and Online Search Friction: Evidence from GDPR

Yu Zhao,Pinar Yildirim,Pradeep K. Chintagunta

DOI: https://doi.org/10.2139/ssrn.3903599

2021-01-01

SSRN Electronic Journal

Abstract:How do privacy regulations in the market impact online search for products and information? This paper investigates the impact of the General Data Protection Regulation (GDPR for short) on consumers’ online browsing and search behavior using consumer panels from four countries, United Kingdom, Spain, United States, and Brazil. We find that after GDPR, a panelist exposed to GDPR submits 21.6% more search terms to access information and browses 16.3% more pages to access consumer goods and services compared to a non-exposed panelist, indicating higher friction in online search. The implications of increased friction are heterogeneous across firms: Bigger e-commerce firms see an increase in consumer traffic and more online transactions. The increase in the number of transactions at large websites is about 6 times the increase experienced by smaller firms. Overall, the post-GDPR online environment may be less competitive for online retailers and may be more difficult for EU consumers to navigate through.
Governing personal data and trade in digital services

Martina F. Ferracane,Erik van der Marel

DOI: https://doi.org/10.1111/roie.12735

IF: 1.234

2024-03-27

Review of International Economics

Abstract:The regulation of personal data varies widely between countries, with potential effects on digital services. We develop a taxonomy for the regulation of cross‐border personal data transfers and systematically categorize 143 countries in one of the three data models identified, which are an open data model, a conditional model, and a control model. Using a gravity model, we then study if sharing a similar regulatory model between trading partners is associated with trade in digital services. Moreover, we assess if enacting a comprehensive data protection law impacts the relationship between data models and digital services. The open model of data transfers appears to support data flows, regardless of the the presence of a domestic regime for personal data. We find a negative effect on digital services for the conditional model that prescribes conditions that need to be fulfilled to transfer personal data across borders. Interestingly, we find that this negative effect is more than offset by the presence of a comprehensive data protection law. Finally, the control model, which has strict conditions to transfer personal data outside the country, only has a negative and significant effect when a domestic regime for data protection is implemented. The latter is likely to reflect the cost burden of firms to comply with these regulations as the trust channel might not be effective in countries characterized by government surveillance.

economics
Big Tech platforms in health research: Re-purposing big data governance in light of the General Data Protection Regulation’s research exemption

Luca Marelli,Giuseppe Testa,Ine Van Hoyweghen

DOI: https://doi.org/10.1177/20539517211018783

2021-01-01

Abstract:The emergence of a global industry of digital health platforms operated by Big Tech corporations, and its growing entanglements with academic and pharmaceutical research networks, raise pressing questions on the capacity of current data governance models, regulatory and legal frameworks to safeguard the sustainability of the health research ecosystem. In this article, we direct our attention toward the challenges faced by the European General Data Protection Regulation in regulating the potentially disruptive engagement of Big Tech platforms in health research. The General Data Protection Regulation upholds a rather flexible regime for scientific research through a number of derogations to otherwise stricter data protection requirements, while providing a very broad interpretation of the notion of “scientific research”. Precisely the breadth of these exemptions combined with the ample scope of this notion could provide unintended leeway to the health data processing activities of Big Tech platforms, which have not been immune from carrying out privacy-infringing and socially disruptive practices in the health domain. We thus discuss further finer-grained demarcations to be traced within the broadly construed notion of scientific research, geared to implementing use-based data governance frameworks that distinguish health research activities that should benefit from a facilitated data protection regime from those that should not. We conclude that a “re-purposing” of big data governance approaches in health research is needed if European nations are to promote research activities within a framework of high safeguards for both individual citizens and society.

social sciences, interdisciplinary
Did the GDPR increase trust in data collectors? Evidence from observational and experimental data

Paul C. Bauer,Frederic Gerdon,Florian Keusch,Frauke Kreuter,David Vannette

DOI: https://doi.org/10.1080/1369118X.2021.1927138

2021-05-25

Information, Communication and Society

Abstract:In the wake of the digital revolution and connected technologies, societies store an ever-increasing amount of data on humans, their preferences, and behavior. These modern technologies create a trust challenge, insofar as individuals have to trust data collectors such as private organizations, government institutions, and researchers that their data is not misused. Privacy regulations should increase trust because they provide laws that increase transparency and allow for punishment in cases in which the trustee violates trust. The introduction of the General Data Protection Regulation (GDPR) in May 2018 – a wide-reaching regulation in EU law on data protection and privacy that covers millions of individuals in Europe – provides a unique setting to study the impact of privacy regulation on trust in data collectors. We collected survey panel data in Germany around the implementation date and ran a survey experiment with a GDPR information treatment. Our observational and experimental evidence does not support the hypothesis that the GDPR has positively affected trust. This finding and our discussion of the underlying reasons are relevant for the wider research field of trust, privacy, and big data.
Cross-Border Data Flows, the GDPR, and Data Governance

W.Gregory Voss,

DOI: https://doi.org/10.17323/1996-7845-2022-01-03

2022-03-15

International Organisations Research Journal

Abstract:Today, cross-border data flows are an important component ofinternational trade and an element of digital service models. However, they are impededby restrictions on cross-border personal data transfers and data localization legislation. ThisArticle focuses primarily on these complexities and on the impact of the new EuropeanUnion (“EU”) legislation on personal data protection—the GDPR. First, this Articleintroduces its discussion of these flows by placing them in their economic and geopoliticalsetting, including a discussion of the results of a lack of international harmonization of lawin the area. In this framework, rule overlap and rival standards are relevant. Once thissituation is established, this Article turns to an analysis of the legal measures that havefilled the gap left by the lack of international regulation and the failure to harmonize law:extraterritorial laws in the European Union (regional legislation) and the United States(state legislation); and data localization laws in China and Russia. Specific provisionsrestricting cross-border personal data transfers are detailed under EU legislation, as are theinternational agreements that have been invaluable in allowing flows between the UnitedStates and the European Union to continue—first the Safe Harbor, and now the Privacy Shield. Finally, in this context, the role of data governance is investigated, both in thecontext of data controllers’ accountability for the actions of other actors in global supplychains under EU law and under the Privacy Shield. Thus, this Article goes beyond the lawitself, to place requirements in the context of the globalized business world of data flows,and to suggest ways that companies may improve their compliance position worldwide.
Impact of the General Data Protection Regulation on the Global Mobile App Market: Digital Trade Implications of Data Protection and Privacy Regulations

Ziru Li,Gunwoong Lee,T. S. Raghu,Zhan (Michael) Shi

DOI: https://doi.org/10.1287/isre.2022.0421

IF: 4.9

2024-06-09

Information Systems Research

Abstract:Although regional data protection and privacy regimes are often cited as major barriers to crossborder digital trade, mitigating consumer privacy concerns through regulations can potentially increase the demand for foreign digital products or services. This study delves into this by assessing the impact of the General Data Protection Regulation (GDPR) on the global mobile app market. Contrary to the belief that such regulations hinder digital trade, our data show a notable post-GDPR increase in top foreign apps in European Union countries, suggesting that the GDPR may alleviate privacy concerns and encourage the adoption of foreign digital products. This finding is crucial for policymakers dealing with data and privacy issues as it indicates the potential of these regulations to balance economic growth with privacy and security protection. The study suggests that data and privacy regulations can address data concerns without significantly harming digital trade. Additionally, it uncovers an opportunity for multinational companies. Although compliance costs are higher, clear privacy regulations could lessen consumer domestic bias, opening doors to international markets. Therefore, evaluating privacy regulations’ impact on global markets means considering both their benefits for demand and their costs for suppliers.

information science & library science,management
The Unwanted Sharing Economy: An Analysis of Cookie Syncing and User Transparency under GDPR

Tobias Urban,Dennis Tatang,Martin Degeling,Thorsten Holz,Norbert Pohlmann

DOI: https://doi.org/10.1145/3320269.3372194

2018-11-21

Abstract:The European General Data Protection Regulation (GDPR), which went into effect in May 2018, leads to important changes in this area: companies are now required to ask for users' consent before collecting and sharing personal data and by law users now have the right to gain access to the personal information collected about them. In this paper, we study and evaluate the effect of the GDPR on the online advertising ecosystem. In a first step, we measure the impact of the legislation on the connections (regarding cookie syncing) between third-parties and show that the general structure how the entities are arranged is not affected by the GDPR. However, we find that the new regulation has a statistically significant impact on the number of connections, which shrinks by around 40%. Furthermore, we analyze the right to data portability by evaluating the subject access right process of popular companies in this ecosystem and observe differences between the processes implemented by the companies and how they interpret the new legislation. We exercised our right of access under GDPR with 36 companies that had tracked us online. Although 32 companies (89%) we inquired replied within the period defined by law, only 21 (58%) finished the process by the deadline set in the GDPR. Our work has implications regarding the implementation of privacy law as well as what online tracking companies should do to be more compliant with the new regulation.

Cryptography and Security
Spillover effects of data breach on consumer perceptions: evidence from the E-commerce industry

Jaeyoung Park,Woosik Shin,Beomsoo Kim,Miyea Kim

DOI: https://doi.org/10.1108/intr-11-2022-0898

IF: 5.9

2024-04-09

Internet Research

Abstract:Purpose This study aims to explore the spillover effects of data breaches from a consumer perspective in the e-commerce context. Specifically, we investigate how an online retailer's data breach affects consumers' privacy risk perceptions of competing firms, and further how it affects shopping intention for the competitors. We also examine how the privacy risk contagion effect varies depending on the characteristics of competitors and their competitive responses. Design/methodology/approach We conducted two scenario-based experiments with surveys. To assess the spillover effects and the moderating effects, we employed an analysis of covariance. We also performed bootstrapping-based mediation analyses using the PROCESS macro. Findings We find evidence for the privacy risk contagion effect and demonstrate that it negatively influences consumers' shopping intention for a competing firm. We also find that a competitor's cybersecurity message is effective in avoiding the privacy risk contagion effect and the competitor even benefits from it. Originality/value While previous studies have examined the impacts of data breaches on customer perceptions of the breached firm, our study focuses on customer perceptions of the non-breached firms. To the best of the authors' knowledge, this study is one of the first to provide empirical evidence for the negative spillover effects of a data breach from a consumer perspective. More importantly, this study empirically demonstrates that the non-breached competitor's competitive response is effective in preventing unintended negative spillover in the context of the data breach.

computer science, information systems,telecommunications,business
Data Policy Restrictions and Cross-border E-commerce: Evidence from China

Shuzhong Ma,Sishi Huang,Peng Wu

DOI: https://doi.org/10.1016/j.asieco.2024.101826

IF: 2.681

2024-01-01

Journal of Asian Economics

Abstract:In the era of digital economics, data has become a crucial factor in driving cross-border e-commerce (CBEC). We examine the impact of data policy restrictions on CBEC, focusing on the Chinese context. Using a theoretical framework that analyzes the costs and benefits of data protection regulations, we delve into the economic effects of these policies. The results show that data policies in importing countries have a substantial negative impact on China's CBEC exports. The heterogeneous analysis shows that this negative impact is stronger for products that are more differentiated, industries that are more highly-digital and high-tech, and countries with higher income. We also estimate the moderating role of data comparative advantage. The results reveal that the trade-inhibiting effect of data restriction increases with the enhancement of importing countries' data comparative advantage. Finally, economic freedom in the importing country can mitigate the negative impact of data policy restrictions.
Data, Privacy Laws and Firm Production: Evidence from the GDPR

Mert Demirer,Diego J. Jiménez Hernández,Dean Li,Sida Peng

DOI: https://doi.org/10.2139/ssrn.4731055

2024-01-01

SSRN Electronic Journal

Abstract:By regulating how firms collect, store, and use data, privacy laws may change the role of data in production and alter firm demand for information technology inputs.We study how firms respond to privacy laws in the context of the EU's General Data Protection Regulation (GDPR) by using seven years of data from a large global cloudcomputing provider.Our difference-in-difference estimates indicate that, in response to the GDPR, EU firms decreased data storage by 26% and data processing by 15% relative to comparable US firms, becoming less "data-intensive."To estimate the costs of the GDPR for firms, we propose and estimate a production function where data and computation serve as inputs to the production of "information."We find that data and computation are strong complements in production and that firm responses are consistent with the GDPR representing a 20% increase in the cost of data on average.Variation in the firm-level effects of the GDPR and industry-level exposure to data, however, drives significant heterogeneity in our estimates of the impact of the GDPR on production costs.
Regulating the digital economy: explaining heterogenous business preferences in data governance

Christine Trampusch

DOI: https://doi.org/10.1080/13501763.2023.2181853

IF: 4.366

2023-03-24

Journal of European Public Policy

Abstract:As part of its European Data Strategy, the EU wants to create a market for non-personal data and unlock the sharing of industrial data between companies. This theory-building case study suggests that businesses' data governance preferences are determined by their position in the data value chain and thus whether firms monetise data as data holders (producers) in the upstream or as data reusers (access seekers) in the downstream segment. While the latter favour legal rules for governing data sharing, the former prefer only contractual agreements. The data value chain theory draws on concepts of the role of data in value creation in the digital economy and on case evidence from the automotive and financial sectors, which are typical cases of digital disruption. The theory helps to better understand coalition building in business lobbying activities, the potential dynamics between private self-regulation and public policies, and the probable feedback effects of digital policies on corporate power sources.

public administration,political science
Unravelling cross-country regulatory intricacies of data governance: the relevance of legal insights for digitalization and international business

Eugénie Coche,Ans Kolk,Václav Ocelík

DOI: https://doi.org/10.1057/s42214-023-00172-1

2023-10-06

Journal of International Business Policy

Abstract:Abstract In an era of digital transformation, where data is often referred to as the ‘new oil’ of business, with data privacy and cybersecurity incidents recurrently making the headlines, international business (IB) scholars are increasingly grappling with the challenges posed by disparate data governance regulations. Recognizing the growing importance of this topic for IB research and policymaking, our paper seeks to offer a comprehensive examination of cross-country regulatory intricacies of data governance, frequently described by IB scholars as ‘complex’ and ‘pluralistic’ institutional contexts. This allows us to explore the various implications of diverse data governance regulations on international business, thus laying the groundwork for rigorous IB policy studies in this area. As a preliminary finding, we highlight a greater need for international cooperation, where both policymakers and multinational enterprises play a pivotal role. Using the EU data governance framework as an illustrative example, we structure our discussion around four policy areas of data governance: data use; data transfers; data storage; and data flows. We aim for this categorization to serve as a foundational basis for future IB research, aiding in tackling one of the most pressing digital challenges of this day and age: reconciling data privacy and security with data-driven innovation.
The Privacy/Antitrust Curse: Insights from GDPR Application in Competition Law Proceedings

Giuseppe Colangelo

DOI: https://doi.org/10.1177/0003603x241283975

2024-09-29

The Antitrust Bulletin

Abstract:In response to the emergence of large online platforms whose business model revolves around the collection and processing of personal data, it is usually suggested that competition and data protection are synergistic, hence requiring an integrated approach. In this respect, Europe represents the testing ground for evaluating how privacy breaches may inform antitrust investigations. Indeed, the General Data Protection Regulation (GDPR) on the one side and the German Facebook antitrust decision on the other side are considered the benchmarks of this new stance aimed at linking market power and data power. This paper tests the concrete viability of such an approach, analyzing how data protection rules and principles have been applied in antitrust proceedings by the European Commission and national competition authorities. Notably, the paper aims at demonstrating the fallacy of the narrative which describes the relationship between privacy and antitrust in terms of synergy and complementarity. Furthermore, the paper maintains that the principles recently affirmed by the European Court of Justice in Meta do not appear conclusive in addressing the issue. The strategic use of privacy as a business justification to pursue anticompetitive advantages currently addressed in the numerous Apple ATT investigations indeed shows the tension between these areas of law. Therefore, rather than strengthening the antitrust enforcement against gatekeepers and their data strategies, the inclusion of privacy harms in antitrust proceedings turns out to be a potential curse for competition authorities, providing players with an opportunity for regulatory gaming to undermine the antitrust enforcement. JEL Codes: D83, K21, L12, L4
Mapping the Empirical Evidence of the GDPR (In-)Effectiveness: A Systematic Review

Wenlong Li,Zihao Li,Wenkai Li,Yueming Zhang,Aolan Li

2024-07-19

Abstract:In the realm of data protection, a striking disconnect prevails between traditional domains of doctrinal, legal, theoretical, and policy-based inquiries and a burgeoning body of empirical evidence. Much of the scholarly and regulatory discourse remains entrenched in abstract legal principles or normative frameworks, leaving the empirical landscape uncharted or minimally engaged. Since the birth of EU data protection law, a modest body of empirical evidence has been generated but remains widely scattered and unexamined. Such evidence offers vital insights into the perception, impact, clarity, and effects of data protection measures but languishes on the periphery, inadequately integrated into the broader conversation. To make a meaningful connection, we conduct a comprehensive review and synthesis of empirical research spanning nearly three decades (1995- March 2022), advocating for a more robust integration of empirical evidence into the evaluation and review of the GDPR, while laying a methodological foundation for future empirical research.

Computers and Society,Artificial Intelligence,Human-Computer Interaction,Information Theory

Regulatory Spillovers and Data Governance: Evidence from the GDPR

Privacy regulation and firm performance: Estimating the GDPR effect globally

The Impact of Privacy Laws on Online User Behavior

The Impact of the General Data Protection Regulation (GDPR) on Online Usage Behavior

Data Privacy Regulation and Cross-Border E-Commerce

Regulating Privacy Online: An Economic Evaluation of the GDPR

The Brussels Effect: How the GDPR Conquered Silicon Valley

Privacy Regulations and Online Search Friction: Evidence from GDPR

Governing personal data and trade in digital services

Big Tech platforms in health research: Re-purposing big data governance in light of the General Data Protection Regulation’s research exemption

Did the GDPR increase trust in data collectors? Evidence from observational and experimental data

Cross-Border Data Flows, the GDPR, and Data Governance

Impact of the General Data Protection Regulation on the Global Mobile App Market: Digital Trade Implications of Data Protection and Privacy Regulations

The Unwanted Sharing Economy: An Analysis of Cookie Syncing and User Transparency under GDPR

Spillover effects of data breach on consumer perceptions: evidence from the E-commerce industry

Data Policy Restrictions and Cross-border E-commerce: Evidence from China

Data, Privacy Laws and Firm Production: Evidence from the GDPR

Regulating the digital economy: explaining heterogenous business preferences in data governance

Unravelling cross-country regulatory intricacies of data governance: the relevance of legal insights for digitalization and international business

The Privacy/Antitrust Curse: Insights from GDPR Application in Competition Law Proceedings

Mapping the Empirical Evidence of the GDPR (In-)Effectiveness: A Systematic Review