IDEAS home Printed from https://ideas.repec.org/a/inm/ormksc/v41y2022i4p746-768.html

Regulatory Spillovers and Data Governance: Evidence from the GDPR

Author

Listed:
  • Christian Peukert

    (Department of Strategy, Globalization and Society, HEC Lausanne, Université de Lausanne, 1015 Lausanne, Switzerland)

  • Stefan Bechtold

    (Department of Humanities, Social and Political Sciences, ETH Zürich, 8092 Zurich, Switzerland)

  • Michail Batikas

    (Supply Chain Management and Information Systems, Rennes School of Business, 35065 Rennes, France)

  • Tobias Kretschmer

    (Institute for Strategy, Technology and Organization, LMU Munich School of Management, 80539 Munich, Germany; CEPR Centre for Economic Policy Research, London EC1V 0DX, United Kingdom)

Abstract

We document short-run changes in websites and the web technology industry with the introduction of the European General Data Protection Regulation (GDPR). We follow more than 110,000 websites and their third-party HTTP requests for 12 months before and 6 months after the GDPR became effective and show that websites substantially reduced their interactions with web technology providers. Importantly, this also holds for websites not legally bound by the GDPR. These changes are especially pronounced among less popular websites and regarding the collection of personal data. We document an increase in market concentration in web technology services after the introduction of the GDPR: Although all firms suffer losses, the largest vendor—Google—loses relatively less and significantly increases market share in important markets such as advertising and analytics. Our findings contribute to the discussion on how regulating privacy, artificial intelligence and other areas of data governance relate to data minimization, regulatory competition, and market structure.

Suggested Citation

  • Christian Peukert & Stefan Bechtold & Michail Batikas & Tobias Kretschmer, 2022. "Regulatory Spillovers and Data Governance: Evidence from the GDPR," Marketing Science, INFORMS, vol. 41(4), pages 746-768, July.
    • Handle: RePEc:inm:ormksc:v:41:y:2022:i:4:p:746-768
    DOI: 10.1287/mksc.2021.1339
    as

    Download full text from publisher

    File URL: http://dx.doi.org/10.1287/mksc.2021.1339
    Download Restriction: no
    File URL: https://libkey.io/10.1287/mksc.2021.1339?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    References listed on IDEAS

    as
    1. Daron Acemoglu & Ali Makhdoumi & Azarakhsh Malekian & Asu Ozdaglar, 2022. "Too Much Data: Prices and Inefficiencies in Data Markets," American Economic Journal: Microeconomics, American Economic Association, vol. 14(4), pages 218-256, November.
    2. Charles I. Jones & Christopher Tonetti, 2020. "Nonrivalry and the Economics of Data," American Economic Review, American Economic Association, vol. 110(9), pages 2819-2858, September.
    3. Avi Goldfarb & Catherine E. Tucker, 2011. "Privacy Regulation and Online Advertising," Management Science, INFORMS, vol. 57(1), pages 57-71, January.
    4. Zhuo, Ran & Huffaker, Bradley & claffy, kc & Greenstein, Shane, 2021. "The impact of the General Data Protection Regulation on internet interconnection," Telecommunications Policy, Elsevier, vol. 45(2).
    5. James Campbell & Avi Goldfarb & Catherine Tucker, 2015. "Privacy Regulation and Market Structure," Journal of Economics & Management Strategy, Wiley Blackwell, vol. 24(1), pages 47-73, March.
    6. Damien Geradin & Theano Karanikioti & Dimitrios Katsifis, 2021. "GDPR Myopia: how a well-intended regulation ended up favouring large online platforms - the case of ad tech," European Competition Journal, Taylor & Francis Journals, vol. 17(1), pages 47-92, January.
    7. Michal S Gal & Oshrit Aviv, 2020. "The Competitive Effects of the GDPR," Journal of Competition Law and Economics, Oxford University Press, vol. 16(3), pages 349-391.
    8. Schmitt, Julia & Miller, Klaus M. & Skiera, Bernd, 2021. "The Impact of Privacy Laws on Online User Behavior," HEC Research Papers Series 1437, HEC Paris.
    9. Avi Goldfarb & Daniel Trefler, 2018. "Artificial Intelligence and International Trade," NBER Chapters, in: The Economics of Artificial Intelligence: An Agenda, pages 463-492, National Bureau of Economic Research, Inc.
    Full references (including those not matched with items on IDEAS)

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Congiu, Raffaele & Sabatino, Lorien & Sapi, Geza, 2022. "The Impact of Privacy Regulation on Web Traffic: Evidence From the GDPR," Information Economics and Policy, Elsevier, vol. 61(C).
    2. Garrett A. Johnson & Scott K. Shriver & Samuel G. Goldberg, 2023. "Privacy and Market Concentration: Intended and Unintended Consequences of the GDPR," Management Science, INFORMS, vol. 69(10), pages 5695-5721, October.
    3. Catherine E. Tucker, 2023. "The Economics of Privacy: An Agenda," NBER Chapters, in: The Economics of Privacy, pages 5-20, National Bureau of Economic Research, Inc.
    4. Mert Demirer & Diego Jimenez-Hernandez & Dean Li & Sida Peng, 2024. "Data, Privacy Laws and Firm Production: Evidence from the GDPR," Working Paper Series WP 2024-02, Federal Reserve Bank of Chicago.
    5. Georgios Petropoulos & Bertin Martens & Geoffrey Parker & Marshall Van Alstyne, 2023. "Platform Competition and Information Sharing," CESifo Working Paper Series 10663, CESifo.
    6. Wolfgang Kerber & Karsten K. Zolna, 2021. "The German Facebook Case: The Law and Economics of the Relationship between Competition and Data Protection Law," MAGKS Papers on Economics 202114, Philipps-Universität Marburg, Faculty of Business Administration and Economics, Department of Economics (Volkswirtschaftliche Abteilung).
    7. Chongwoo Choe & Noriaki Matsushima & Shiva Shekhar, 2025. "The Bright Side of the GDPR: Welfare-Improving Privacy Management," Management Science, INFORMS, vol. 71(8), pages 6836-6858, August.
    8. Chen, Hongze & Li, Conggang & Liu, Jiatao & Xu, Rong, 2025. "Navigating digital frontiers: The impact of China's cybersecurity law on corporate digital innovation," International Review of Financial Analysis, Elsevier, vol. 103(C).
    9. Lorien Sabatino & Geza Sapi, 2023. "Privacy regulation and online concentration during demand peaks: evidence from the E-commerce sector," Economia e Politica Industriale: Journal of Industrial and Business Economics, Springer;Associazione Amici di Economia e Politica Industriale, vol. 50(2), pages 265-282, June.
    10. Flavio Pino, 2022. "The microeconomics of data – a survey," Economia e Politica Industriale: Journal of Industrial and Business Economics, Springer;Associazione Amici di Economia e Politica Industriale, vol. 49(3), pages 635-665, September.
    11. Garrett A. Johnson, 2022. "Economic Research on Privacy Regulation: Lessons from the GDPR and Beyond," NBER Chapters, in: The Economics of Privacy, pages 97-126, National Bureau of Economic Research, Inc.
    12. Maximilian Schaefer, 2025. "When Should we Expect Non-Decreasing Returns from Data in Prediction Tasks?," Papers 2503.03602, arXiv.org.
    13. Bergemann, Dirk & Ottaviani, Marco, 2021. "Information Markets and Nonmarkets," CEPR Discussion Papers 16459, C.E.P.R. Discussion Papers.
    14. Avi Goldfarb, 2014. "What is Different About Online Advertising?," Review of Industrial Organization, Springer;The Industrial Organization Society, vol. 44(2), pages 115-129, March.
    15. Ratul Das Chaudhury & Chongwoo Choe, 2023. "Digital Privacy: GDPR and Its Lessons for Australia," Australian Economic Review, The University of Melbourne, Melbourne Institute of Applied Economic and Social Research, vol. 56(2), pages 204-220, June.
    16. Florian Hoffmann & Roman Inderst & Marco Ottaviani, 2013. "Hypertargeting, Limited Attention, and Privacy: Implications for Marketing and Campaigning," Working Papers 479, IGIER (Innocenzo Gasparini Institute for Economic Research), Bocconi University.
    17. S Nageeb Ali & Greg Lewis & Shoshana Vasserman, 2023. "Voluntary Disclosure and Personalized Pricing," The Review of Economic Studies, Review of Economic Studies Ltd, vol. 90(2), pages 538-571.
    18. Yunfei (Jesse) Yao, 2025. "Reputation for Privacy," Marketing Science, INFORMS, vol. 44(5), pages 1145-1162, September.
    19. Andrew Li & R. Ravi & Karan Singh & Zihong Yi & Weizhong Zhang, 2025. "How to Sell High-Dimensional Data Optimally," Papers 2510.15214, arXiv.org, revised Mar 2026.
    20. Jian Jia & Ginger Zhe Jin & Liad Wagman, 2018. "The Short-Run Effects of GDPR on Technology Venture Investment," NBER Working Papers 25248, National Bureau of Economic Research, Inc.

    More about this item

    Keywords

    ;
    ;
    ;
    ;
    ;
    ;
    ;
    ;
    ;
    ;
    ;
    ;

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:inm:ormksc:v:41:y:2022:i:4:p:746-768. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Chris Asher (email available below). General contact details of provider: https://edirc.repec.org/data/inforea.html .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.