Modern websites rely on personal data to analyze traffic on their websites and market them- selves. We study the European Union's General Data Protection Regulation (GDPR), which requires that sites seek user consent to process personal data like cookie identifiers and email ad- dresses. We...

Solving the problems associated with identity management in the "virtual" world is proving to be one of the keys to full realization of the economic and social benefits of networked information systems. By definition, the virtual world lacks the rich combination of sensory and contextual cues...

The European Commission’s General Data Protection Regulation (GDPR) encompasses perhaps the most monumental pan-European regulation in the last decade and may well become a de facto world standard. The regulation is described as a means to regulate the processing of personal data, the...

We study the GDPR's opt-in requirement in a model with a firm that provides a digital service and consumers who are heterogeneous in their valuations of the firm's service as well as the privacy costs incurred when sharing personal data with the firm. We show that the GDPR boosts demand for the...

We study the GDPR's opt-in requirement in a model with a firm that provides a digital service and consumers who are heterogeneous in their valuations of the firm's service as well as the privacy costs incurred when sharing personal data with the firm. We show that the GDPR boosts demand for the...

We study the GDPR's opt-in requirement in a model with a firm that provides a digital service and consumers who are heterogeneous in their valuations of the firm's service as well as the privacy costs incurred when sharing personal data with the firm. We show that the GDPR boosts demand for the...

Privacy regulations like the General Data Protection Regulation aim to empower consumers with greater transparency and control over their personal data. In response, firms may exercise price discrimination in the form of versioning. This paper studies how these two aspects of privacy regulation...

Data protection and privacy rights afforded to consumers by General Data Protection Regulation (GDPR) have presented a challenge to the firms that depend on private consumer data for targeted pricing, product recommendations and other purposes. Specifically, GDPR affords consumers the right to...

Google's new “Interest Based Advertising” (IBA) program represents the company's first foray into what is generally called “Online Behavioral Advertising”: In order to deliver more relevant advertising, Google will begin tailoring ads delivered through AdSense on the Google Content...