Europeans face a regulatory challenge: how can the human rights and dignitary values that animate data protection law be protected in transborder data flows? With the proposal of the EU-US Privacy Shield, part of the challenge will be answered by the US Federal Trade Commission (FTC). The FTC is...

This paper quantifies the effect of state privacy regulation on the diffusion of Electronic Medical Records (EMR). EMR allow medical providers to store and exchange patient information using computers rather than paper records. Hospitals may be more likely to adopt EMR if they can reassure...

This paper presents a multi-stakeholder approach for developing an appropriate privacy regulation in the age of big data. We develop our argument in five steps, starting (1) with a review of the current academic debate on privacy regulation. We analyze a dysfunctional mutual excludability...

Google's new “Interest Based Advertising” (IBA) program represents the company's first foray into what is generally called “Online Behavioral Advertising”: In order to deliver more relevant advertising, Google will begin tailoring ads delivered through AdSense on the Google Content...

We present a model of a market failure based on a requirement provision by digital platforms in the acquisition of personal information from users of other products/services. We establish the economic harm from the market failure and the requirement using traditional antitrust methodology....

We discuss how the acquisition of private information by default without compensation by digital platforms such as Google and Facebook creates a market failure and can be grounds for antitrust enforcement. To avoid the market failure, the default in the collection of personal information has to...

The General Data Protection Regulation (GDPR) was enacted in the European Union in April 2016 and went into effect in May 2018. We study its impact on investment in new and emerging technology firms. Our findings indicate negative post-GDPR effects after its 2018 rollout on European ventures,...

We compare the private and social incentives for privacy when sellers can commit to transparent privacy policies that are understood by consumers. The purpose is to establish a baseline for how well markets perform when firms' privacy policies are common knowledge. In this setting, if the market...

This paper presents a multi-stakeholder approach for developing an appropriate privacy regulation in the age of big data. We develop our argument in five steps, starting (1) with a review of the current academic debate on privacy regulation. We analyze a dysfunctional mutual excludability...

Motivated by the unprecedented availability of consumer information on the Internet, we characterize the winners and losers from potential privacy regulation in the context of four commonly-used oligopoly models: a linear city model, a circular city model, a vertical differentiation model, and a...