mandatory requirement in certain circumstances under the European General Data Protection Regulation (GDPR). This article … theory, this article suggests a more nuanced account of the mandatory impact assessment regime outlined in the GDPR.• It …

This paper reviews the economic literature on the European Union's General Data Protection Regulation (GDPR). I … GDPR to date has largely--though not universally--documented harms to firms. These harms include firm performance … privacy improvements as well as helpful survey evidence. The literature also examines the consequences of the GDPR's design …