The Archives

The collection of all scholarly commentary on law, economics, and more

Showing archive for:  “GDPR”

The Problem of Data Property Rights

Policy discussions about the use of personal data often have “less is more” as a background assumption; that data is overconsumed relative to some hypothetical optimal baseline. This overriding skepticism has been the backdrop for sweeping new privacy regulations, such as the California Consumer Privacy Act (CCPA) and the EU’s General Data Protection Regulation (GDPR). ... The Problem of Data Property Rights

Building the Digital Future: Can the EU Foster a Dynamic and Crime-Free Internet?

The European Commission has unveiled draft legislation (the Digital Services Act, or “DSA”) that would overhaul the rules governing the online lives of its citizens. The draft rules are something of a mixed bag. While online markets present important challenges for law enforcement, the DSA would significantly increase the cost of doing business in Europe ... Building the Digital Future: Can the EU Foster a Dynamic and Crime-Free Internet?

It’s Not So Simple Who Owns “Your” Data

What kind of regulation? Treating digital platforms like public utilities won’t work, Petit argues, because the product is multidimensional and competition takes place on multiple margins (the larger theme of the book): “there is a plausible chance that increased competition in digital markets will lead to a race to the bottom, in which price competition ... It’s Not So Simple Who Owns “Your” Data

We Need to Talk About Privacy Absolutism

Privacy absolutism is the misguided belief that protecting citizens’ privacy supersedes all other policy goals, especially economic ones. This is a mistake. Privacy is one value among many, not an end in itself. Unfortunately, the absolutist worldview has filtered into policymaking and is beginning to have very real consequences. Readers need look no further than ... We Need to Talk About Privacy Absolutism

The Negative Externalities of Protecting Privacy

The public policy community’s infatuation with digital privacy has grown by leaps and bounds since the enactment of GDPR and the CCPA, but COVID-19 may leave the most enduring mark on the actual direction that privacy policy takes. As the pandemic and associated lockdowns first began, there were interesting discussions cropping up about the inevitable ... The Negative Externalities of Protecting Privacy

Privacy in the Time of Covid-19

I type these words while subject to a stay-at-home order issued by West Virginia Governor James C. Justice II. “To preserve public health and safety, and to ensure the healthcare system in West Virginia is capable of serving all citizens in need,” I am permitted to leave my home only for a limited and precisely ... Privacy in the Time of Covid-19

COVID-19 Exposes the Shallowness of Our Privacy Theories

The importance of testing and contact tracing to slow the spread of the novel coronavirus and resume normal life is now well established. The difference between the communities that do it and the ones that don’t is disturbingly grim (see, e.g., South Korea versus Italy). In a large population like the U.S., contact tracing and ... COVID-19 Exposes the Shallowness of Our Privacy Theories

A New Office of Technology Assessment: The Wrong Answer to the Wrong Question at the Wrong Time

Congress needs help understanding the fast moving world of technology. That help is not going to arise by reviving the Office of Technology Assessment (“OTA”), however. The OTA is an idea for another age, while the tweaks necessary to shore up the existing  technology resources available to Congress are relatively modest.  Although a new OTA ... A New Office of Technology Assessment: The Wrong Answer to the Wrong Question at the Wrong Time

Why Data Is Not the New Oil

“Data is the new oil,” said Jaron Lanier in a recent op-ed for The New York Times. Lanier’s use of this metaphor is only the latest instance of what has become the dumbest meme in tech policy. As the digital economy becomes more prominent in our lives, it is not unreasonable to seek to understand ... Why Data Is Not the New Oil

The Digital Policy of the Next EU Commission: All roads Lead to Margrethe Vestager

Ursula von der Leyen has just announced the composition of the next European Commission. For tech firms, the headline is that Margrethe Vestager will not only retain her job as the head of DG Competition, she will also oversee the EU’s entire digital markets policy in her new role as Vice-President in charge of digital ... The Digital Policy of the Next EU Commission: All roads Lead to Margrethe Vestager

Ten Reasons Why the California Consumer Privacy Act (CCPA) Is Going to Be a Dumpster Fire

Last year, real estate developer Alastair Mactaggart spent nearly $3.5 million to put a privacy law on the ballot in California’s November election. He then negotiated a deal with state lawmakers to withdraw the ballot initiative if they passed their own privacy bill. That law — the California Consumer Privacy Act (CCPA) — was enacted ... Ten Reasons Why the California Consumer Privacy Act (CCPA) Is Going to Be a Dumpster Fire

GDPR After One Year: Costs and Unintended Consequences

GDPR is officially one year old. How have the first 12 months gone? As you can see from the mix of data and anecdotes below, it appears that compliance costs have been astronomical; individual “data rights” have led to unintended consequences; “privacy protection” seems to have undermined market competition; and there have been large unseen ... GDPR After One Year: Costs and Unintended Consequences