IDEAS home Printed from https://ideas.repec.org/p/ces/ceswps/_9359.html
   My bibliography  Save this paper

Promise not Fulfilled: FinTech Data Privacy, and the GDPR

Author

Listed:
  • Gregor Dorfleitner
  • Lars Hornuf
  • Julia Kreppmeier

Abstract

This article analyzes how the General Data Protection Regulation (GDPR) has affected the privacy practices of FinTech firms. We study the content of 308 privacy statements respectively before and after the GDPR became binding. Using textual analysis methods, we find that the readability of the privacy statements has decreased. The texts of privacy statements have become longer and use more standardized language, resulting in worse user comprehension. This calls into question whether the GDPR has achieved its original goal—the protection of natural persons regarding the processing of personal data. We also analyze the content of privacy statements and link it to company- and industry-specific determinants. Before the GDPR became binding, more external investors and a higher legal capital were related to a higher quantity of data processed and more transparency, but not thereafter. Finally, we document mimicking behavior among industry peers with regard to the data processed and transparency.

Suggested Citation

  • Gregor Dorfleitner & Lars Hornuf & Julia Kreppmeier, 2021. "Promise not Fulfilled: FinTech Data Privacy, and the GDPR," CESifo Working Paper Series 9359, CESifo.
  • Handle: RePEc:ces:ceswps:_9359
    as

    Download full text from publisher

    File URL: https://www.cesifo.org/DocDL/cesifo1_wp9359.pdf
    Download Restriction: no
    ---><---

    References listed on IDEAS

    as
    1. Douglas J. Cumming & Gaël Leboeuf & Armin Schwienbacher, 2020. "Crowdfunding models: Keep‐It‐All vs. All‐Or‐Nothing," Financial Management, Financial Management Association International, vol. 49(2), pages 331-360, June.
    2. Posner, Richard A, 1981. "The Economics of Privacy," American Economic Review, American Economic Association, vol. 71(2), pages 405-409, May.
      • Posner, Richard A., 1980. "The Economics of Privacy," Working Papers 16, The University of Chicago Booth School of Business, George J. Stigler Center for the Study of the Economy and the State.
    3. Lars Hornuf & Milan F. Klus & Todor S. Lohwasser & Armin Schwienbacher, 0. "How do banks interact with fintech startups?," Small Business Economics, Springer, vol. 0, pages 1-22.
    4. Amalia R. Miller & Catherine Tucker, 2009. "Privacy Protection and Technology Diffusion: The Case of Electronic Medical Records," Management Science, INFORMS, vol. 55(7), pages 1077-1093, July.
    5. Alessandro Acquisti & Curtis Taylor & Liad Wagman, 2016. "The Economics of Privacy," Journal of Economic Literature, American Economic Association, vol. 54(2), pages 442-492, June.
    6. Shai Bernstein & Arthur Korteweg & Kevin Laws, 2017. "Attracting Early-Stage Investors: Evidence from a Randomized Field Experiment," Journal of Finance, American Finance Association, vol. 72(2), pages 509-538, April.
    7. Gerrit K.C. Ahlers & Douglas Cumming & Christina Günther & Denis Schweizer, 2015. "Signaling in Equity Crowdfunding," Entrepreneurship Theory and Practice, , vol. 39(4), pages 955-980, July.
    8. Nicholas Martin & Christian Matt & Crispin Niebel & Knut Blind, 2019. "How Data Protection Regulation Affects Startup Innovation," Information Systems Frontiers, Springer, vol. 21(6), pages 1307-1324, December.
    9. R. I. Singh & M. Sumeeth & J. Miller, 2011. "Evaluating the Readability of Privacy Policies in Mobile Environments," International Journal of Mobile Human Computer Interaction (IJMHCI), IGI Global, vol. 3(1), pages 55-78, January.
    10. Jan Hendrik Betzing & Matthias Tietz & Jan Brocke & Jörg Becker, 2020. "Correction to: The impact of transparency on mobile privacy decision making," Electronic Markets, Springer;IIM University of St. Gallen, vol. 30(3), pages 627-627, September.
    11. He Li & Lu Yu & Wu He, 2019. "The Impact of GDPR on Global Technology Development," Journal of Global Information Technology Management, Taylor & Francis Journals, vol. 22(1), pages 1-6, January.
    12. Gregor Dorfleitner & Lars Hornuf & Matthias Schmitt & Martina Weber, 2017. "FinTech in Germany," Springer Books, Springer, number 978-3-319-54666-7, October.
    13. Janice Y. Tsai & Serge Egelman & Lorrie Cranor & Alessandro Acquisti, 2011. "The Effect of Online Privacy Information on Purchasing Behavior: An Experimental Study," Information Systems Research, INFORMS, vol. 22(2), pages 254-268, June.
    14. Laursen, Keld & Salter, Ammon J., 2014. "The paradox of openness: Appropriability, external search and collaboration," Research Policy, Elsevier, vol. 43(5), pages 867-878.
    15. Papke, Leslie E & Wooldridge, Jeffrey M, 1996. "Econometric Methods for Fractional Response Variables with an Application to 401(K) Plan Participation Rates," Journal of Applied Econometrics, John Wiley & Sons, Ltd., vol. 11(6), pages 619-632, Nov.-Dec..
    16. Yannis Bakos & Florencia Marotta-Wurgler & David R. Trossen, 2014. "Does Anyone Read the Fine Print? Consumer Attention to Standard-Form Contracts," The Journal of Legal Studies, University of Chicago Press, vol. 43(1), pages 1-35.
    17. Tim Loughran & Bill Mcdonald, 2014. "Measuring Readability in Financial Disclosures," Journal of Finance, American Finance Association, vol. 69(4), pages 1643-1671, August.
    18. Duchesneau, Donald A. & Gartner, William B., 1990. "A profile of new venture success and failure in an emerging industry," Journal of Business Venturing, Elsevier, vol. 5(5), pages 297-312, September.
    19. Tobias Berg & Valentin Burg & Ana Gombović & Manju Puri, 2020. "On the Rise of FinTechs: Credit Scoring Using Digital Footprints," The Review of Financial Studies, Society for Financial Studies, vol. 33(7), pages 2845-2897.
    20. Ciarán mac an Bhaird & Brian Lucey, 2010. "Determinants of capital structure in Irish SMEs," Small Business Economics, Springer, vol. 35(3), pages 357-375, October.
    21. Ravi Inder Singh & Manasa Sumeeth & James Miller, 2011. "A user-centric evaluation of the readability of privacy policies in popular web sites," Information Systems Frontiers, Springer, vol. 13(4), pages 501-514, September.
    22. Lior Jacob Strahilevitz & Matthew B. Kugler, 2016. "Is Privacy Policy Language Irrelevant to Consumers?," The Journal of Legal Studies, University of Chicago Press, vol. 45(S2), pages 69-95.
    23. Gregor Dorfleitner & Lars Hornuf, 2019. "FinTech and Data Privacy in Germany," Springer Books, Springer, number 978-3-030-31335-7, October.
    24. Jan Hendrik Betzing & Matthias Tietz & Jan Brocke & Jörg Becker, 2020. "The impact of transparency on mobile privacy decision making," Electronic Markets, Springer;IIM University of St. Gallen, vol. 30(3), pages 607-625, September.
    25. David H. Hsu, 2006. "Venture Capitalists and Cooperative Start-up Commercialization Strategy," Management Science, INFORMS, vol. 52(2), pages 204-219, February.
    26. Tim Loughran & Bill Mcdonald, 2016. "Textual Analysis in Accounting and Finance: A Survey," Journal of Accounting Research, Wiley Blackwell, vol. 54(4), pages 1187-1230, September.
    27. Tamara Dinev & Paul Hart, 2006. "An Extended Privacy Calculus Model for E-Commerce Transactions," Information Systems Research, INFORMS, vol. 17(1), pages 61-80, March.
    28. Dirk De Clercq & Dimo Dimov, 2008. "Internal Knowledge Development and External Knowledge Access in Venture Capital Investment Performance," Journal of Management Studies, Wiley Blackwell, vol. 45(3), pages 585-612, May.
    29. Cumming, Douglas & Meoli, Michele & Vismara, Silvio, 2019. "Investors’ choices between cash and voting rights: Evidence from dual-class equity crowdfunding," Research Policy, Elsevier, vol. 48(8), pages 1-1.
    30. Drasch, Benedict J. & Schweizer, André & Urbach, Nils, 2018. "Integrating the ‘Troublemakers’: A taxonomy for cooperation between banks and fintechs," Journal of Economics and Business, Elsevier, vol. 100(C), pages 26-42.
    Full references (including those not matched with items on IDEAS)

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Gregor Dorfleitner & Lars Hornuf & Julia Kreppmeier, 2023. "Promise not fulfilled: FinTech, data privacy, and the GDPR," Electronic Markets, Springer;IIM University of St. Gallen, vol. 33(1), pages 1-29, December.
    2. Morlok, Tina & Matt, Christian & Hess, Thomas, 2017. "Privatheitsforschung in den Wirtschaftswissenschaften: Entwicklung, Stand und Perspektiven," Working Papers 1/2017, University of Munich, Munich School of Management, Institute for Information Systems and New Media.
    3. Fast, Victoria & Sachs, Nikolai & Schnurr, Daniel, 2021. "Privacy Decision-Making in Digital Markets: Eliciting Individuals' Preferences for Transparency," 23rd ITS Biennial Conference, Online Conference / Gothenburg 2021. Digital societies and industrial transformations: Policies, markets, and technologies in a post-Covid world 238020, International Telecommunications Society (ITS).
    4. Helia Marreiros & Mirco Tonin & Michael Vlassopoulos & M.C. Schraefel, 2016. "“Now that you mention it”: A Survey Experiment on Information, Salience and Online Privacy," BEMPS - Bozen Economics & Management Paper Series BEMPS34, Faculty of Economics and Management at the Free University of Bozen.
    5. Bleier, Alexander & Goldfarb, Avi & Tucker, Catherine, 2020. "Consumer privacy and the future of data-based innovation and marketing," International Journal of Research in Marketing, Elsevier, vol. 37(3), pages 466-480.
    6. Francesca Pietro, 2021. "The rationale for listing on equity crowdfunding: actual and expected benefits for companies," Economia e Politica Industriale: Journal of Industrial and Business Economics, Springer;Associazione Amici di Economia e Politica Industriale, vol. 48(4), pages 527-549, December.
    7. Dengler, Sebastian & Prüfer, Jens, 2021. "Consumers' privacy choices in the era of big data," Games and Economic Behavior, Elsevier, vol. 130(C), pages 499-520.
    8. Jae Kyu Lee & Younghoon Chang & Hun Yeong Kwon & Beopyeon Kim, 2020. "Reconciliation of Privacy with Preventive Cybersecurity: The Bright Internet Approach," Information Systems Frontiers, Springer, vol. 22(1), pages 45-57, February.
    9. Renata Benigna Gonçalves & Júlio César Bastos Figueiredo, 2022. "Effects of perceived risks and benefits in the formation of the consumption privacy paradox: a study of the use of wearables in people practicing physical activities," Electronic Markets, Springer;IIM University of St. Gallen, vol. 32(3), pages 1485-1499, September.
    10. Goethner, Maximilian & Hornuf, Lars & Regner, Tobias, 2021. "Protecting investors in equity crowdfunding: An empirical analysis of the small investor protection act," Technological Forecasting and Social Change, Elsevier, vol. 162(C).
    11. Idris Adjerid & Sonam Samat & Alessandro Acquisti, 2016. "A Query-Theory Perspective of Privacy Decision Making," The Journal of Legal Studies, University of Chicago Press, vol. 45(S2), pages 97-121.
    12. Anjuli Franz & Alexander Benlian, 2022. "Exploring interdependent privacy – Empirical insights into users’ protection of others’ privacy on online platforms," Electronic Markets, Springer;IIM University of St. Gallen, vol. 32(4), pages 2293-2309, December.
    13. Katharina Baum & Olga Abramova & Stefan Meißner & Hanna Krasnova, 2023. "The effects of targeted political advertising on user privacy concerns and digital product acceptance: A preference-based approach," Electronic Markets, Springer;IIM University of St. Gallen, vol. 33(1), pages 1-17, December.
    14. Butticè, Vincenzo & Di Pietro, Francesca & Tenca, Francesca, 2020. "Is equity crowdfunding always good? Deal structure and the attraction of venture capital investors," Journal of Corporate Finance, Elsevier, vol. 65(C).
    15. Caleb S. Fuller, 2018. "Privacy law as price control," European Journal of Law and Economics, Springer, vol. 45(2), pages 225-250, April.
    16. Jin, Ginger Zhe & Wagman, Liad, 2021. "Big data at the crossroads of antitrust and consumer protection," Information Economics and Policy, Elsevier, vol. 54(C).
    17. Michael Kummer & Patrick Schulte, 2019. "When Private Information Settles the Bill: Money and Privacy in Google’s Market for Smartphone Applications," Management Science, INFORMS, vol. 65(8), pages 3470-3494, August.
    18. Xudong Lin & Shuilin Liu & Xiaoli Huang & Hanyang Luo & Sumin Yu, 2021. "Platform Revenue Strategy Selection Considering Consumer Group Data Privacy Regulation," Mathematics, MDPI, vol. 9(22), pages 1-24, November.
    19. Anna D’Annunzio & Elena Menichelli, 2022. "A market for digital privacy: consumers’ willingness to trade personal data and money," Economia e Politica Industriale: Journal of Industrial and Business Economics, Springer;Associazione Amici di Economia e Politica Industriale, vol. 49(3), pages 571-598, September.
    20. Enrico Forti & Serena Morricone & Federico Munari, 2021. "Litigation risks and firms innovation dynamics after the IPO," Economia e Politica Industriale: Journal of Industrial and Business Economics, Springer;Associazione Amici di Economia e Politica Industriale, vol. 48(2), pages 291-313, June.

    More about this item

    Keywords

    data privacy; FinTech; General Data Protection Regulation; privacy statement; textual analysis; financial technology;
    All these keywords.

    JEL classification:

    • K20 - Law and Economics - - Regulation and Business Law - - - General
    • L81 - Industrial Organization - - Industry Studies: Services - - - Retail and Wholesale Trade; e-Commerce

    NEP fields

    This paper has been announced in the following NEP Reports:

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:ces:ceswps:_9359. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Klaus Wohlrabe (email available below). General contact details of provider: https://edirc.repec.org/data/cesifde.html .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.