Blog Post

A broader view on EU data protection

The data protection of EU citizens has been in focus ever since the surge in espionage scandals that began with the leaks from Edward Snowden. But besides having plenty of coverage from the political and legal standpoint, not so much attention has been given to the economic perspective surrounding this matter.

By: and Date: January 8, 2014 Topic: Innovation & Competition Policy

The data protection of EU citizens has been in focus ever since the surge in espionage scandals that began with the leaks from Edward Snowden. But besides having plenty of coverage from the political and legal standpoint, not so much attention has been given to the economic perspective surrounding this matter. The issue comprises three main aspects:

  • The discussion of a revision of the US-EU Safe Harbour Arrangement, whereby US firms can operate in Europe under US privacy rules as long as they comply with the seven principles of the EU Data Protection Directive, thus allowing US intelligence (NSA) to survey EU citizens’, as is very well explained in this FT article.
  • The revision of the current EU Data Protection Directive (95/46/EC DPD), which has been in force for almost two decades now and is scheduled to be updated in spring 2014, so as to reflect the changes in technology, markets and preferences/attitudes of consumers.
  • And last but not least, the EU also needs to work towards a single digital market that provides the right conditions for global IT companies to do business in Europe while carrying an adequate tax burden, and at the same time creating conditions for European IT companies to develop and be competitive in the global digital market.

Protecting heterogeneous consumers without decreasing the social welfare

We believe that the discussion about data protection in the EU has been almost exclusively focused on a single model of ensuring a high level of data protection for all EU citizens, advocating that privacy is not a question of consumer right to be adjudicated as in the US, but a fundamental human right. Besides the fact that the right to privacy is indeed in the Universal Declaration of Human Rights (Article 12) and in the European Convention of Human Rights (Article 8), we believe that this sole view is too narrow as it disregards the welfare effects that new legislation could bring about.

Beyond privacy, consumers also care about the quality and the price of digital services and products, any regulation on privacy should also assess the impact on quality/price.  For example, if certain services ceased to be offered to European consumers or they are offered at much higher prices as a consequence of new strict privacy rules, would (all) consumers be willing to pay that “price for privacy?

Consumer heterogeneity needs to be acknowledged and it is likely to be cut horizontally across European society (i.e. consumers who are more/less willing to pay for privacy can be found in all countries). Consumers differ with regards to the“privacy” rights they want and how much they are “willing to pay” for this. There is no one size fits all.

It is not only about consumers, producers matter too

With every regulatory change there will be winners and losers, thus producer interest in Europe (whether they are European or foreign owned) should be considered as well (which takes us back to the need for a single digital market).

An important business segment that is decisively dependent on the future of data privacy regulation in the EU is the one that supplies Privacy Enhancing Technologies (PETs). This is an industry where Europe could potentially become a strong player, providing PET services to the global markets if the right regulations were to be set. Data protection regulation should not impede the development of this European industry. This potential for European based global PET can be a source of important EU added value, jobs, growth and external competitiveness.

This requires a regulatory approach that:

  • Recognizes consumer heterogeneity on privacy preferences
  • Is as technology neutral as possible, not preventing the development of new futuretechnologies
  • Is globally coordinated and accepted. Ideally European regulation should be designed in a way that allows the upsurge of new privacy services and digital business models that are also attractive for consumers in other markets, thus the need for regulators in these markets to recognize European regulation.[1]

European regulation should not be about protectionism, i.e. protecting European firms, but creating a fair level playing competitive scene in the data/digital eco-system, i.e. it should apply to all firms supplying European consumers (European as well as foreign).

With the proper regulation in place (one that unleashes market and technology dynamics), there will be no trade-off between consumer privacy and business interests, on the contrary: new technologies/business models will offer a menu of privacy services to consumers wherever they are located.


[1] The Committee on Industry, Research and Energy (ITRE) published last year a Data Protection Review: Impact on EU Innovation and Competitiveness: the study found that the Regulation offers many potential advantages, but tends to be overly prescriptive in areas where European firms have already demonstrated their ability to reconcile privacy rights with economic development.

 


Republishing and referencing

Bruegel considers itself a public good and takes no institutional standpoint. Anyone is free to republish and/or quote this post without prior consent. Please provide a full reference, clearly stating Bruegel and the relevant author as the source, and include a prominent hyperlink to the original post.

View comments
Read about event More on this topic

Past Event

Past Event

Protecting the privacy of electronic communications: getting the next steps right

Do the European Commission's recent initiatives put us on the right path?

Speakers: Nicholas Blades, Orla Lynskey, J. Scott Marcus, Alexander Whalen and Jeremy Rollison Topic: Innovation & Competition Policy Location: Bruegel, Rue de la Charité 33, 1210 Brussels Date: April 25, 2017
Read about event More on this topic

Past Event

Past Event

Artificial intelligence: challenges and opportunities

Rob Atkinson, the founder and president of the Information Technology and Innovation Foundation presented his research work on the impact of artificial intelligence on our lives.

Speakers: Robert Atkinson, Anna Byhovskaya, Merja Kyllönen and Georgios Petropoulos Topic: Innovation & Competition Policy Location: Bruegel, Rue de la Charité 33, 1210 Brussels Date: March 23, 2017
Read article More on this topic More by this author

Blog Post

Scott Marcus

How good a shield is Privacy Shield?

Privacy Shield was put in place in 2016 to ensure that transfers of personal data from the EU to the US would be in compliance with European Union privacy law, and thus permissible. The institutional framework of Privacy Shield was weak, and depended on the good will of the US administration. Recent actions by the new administration, including the famous executive order forbidding residents from 7 predominantly Muslim countries to enter the US, may have (presumably unintended) effects on Privacy Shield. To preserve the validity of Privacy Shield in European Courts, strong EU-US cooperation and potentially additional agreements may become necessary.

By: J. Scott Marcus Topic: Innovation & Competition Policy Date: February 7, 2017
Read article More on this topic More by this author

External Publication

9783319418445

Policy and Politics in the Era of the Industrial Internet: How the Digital Transformation Will Change the Political Arena

The digital transformation has already had an impact on policymaking, and this trend will continue in the years to come. How will the political process change and how can influencers guide this change?

By: Giuseppe Porcaro Topic: Innovation & Competition Policy Date: December 7, 2016
Read article More by this author

Blog Post

Giuseppe Porcaro

The industrial internet will transform policymaking

The ‘internet of things’ will bring major changes in many areas of life, including the political arena. What will be the new communication tools, strategies and narratives for policymakers?

By: Giuseppe Porcaro Topic: Innovation & Competition Policy Date: September 28, 2016
Read article More on this topic

Blog Post

Scott Marcus
IMG_20151119_103626

Brexit and its potential impact on international data transfers

If the UK exits the EU and the EEA, it will have to go to considerable lengths to enable continued data transfers from the EU. Without an agreement on data transfers and data protection, business in the UK and the EU will be disrupted.

By: J. Scott Marcus and Georgios Petropoulos Topic: Innovation & Competition Policy Date: August 4, 2016
Read article More on this topic

Blog Post

IMG_20151009_103117 (3)
IMG_20151119_103626

German Facebook probe links data protection and competition policy

On March 2, 2016, the German Federal Cartel Office opened an antitrust investigation into Facebook’s contract clauses on data use, in what appears to be the first antitrust case in Europe based on a breach of data protection rules. We discuss the link between data protection rules and competition policy, which is still underexplored.

By: Nuria Boot and Georgios Petropoulos Topic: Innovation & Competition Policy Date: March 14, 2016
Read article More on this topic

Blog Post

Photo
IMG_20151119_103626

The economic value of personal data for online platforms, firms and consumers

Data is often referred to as the ‘oil of the twenty-first century'. This article reviews how personal data generate economic value for the three major parties of the digital market: online platforms (such as search engines, social networking sites, online videos, content sites) and their clients, companies and consumers.

By: Cassandra Liem and Georgios Petropoulos Topic: Innovation & Competition Policy Date: January 14, 2016
Read article More on this topic

Blog Post

Scott Marcus
IMG_20151119_103626

Data transfers under the threat of terrorist attacks

The recent terrorist attacks in Paris and elsewhere have created an atmosphere of insecurity and fear among the citizens of the main European capitals. They have also highlighted the necessity for more effective tools at European level in the fight against terrorism and the prevention of future attacks in the European soil.

By: J. Scott Marcus and Georgios Petropoulos Topic: Innovation & Competition Policy Date: December 15, 2015
Read article More on this topic More by this author

Video

Video

The economic impact of data protection

Much has been said on data protection from the political and legal points of view, but the impact in the economy has so far been ignored. Bruegel’s Reinhilde Veugelers talks about how new EU regulation will have to consider how to combine consumers’ willingness to keep privacy with competitiveness for companies dealing with data.

By: Reinhilde Veugelers Topic: Innovation & Competition Policy Date: December 4, 2013