Measuring the brussels effect through access requests
Has the European General Data Protection Regulation Influenced the Data Protection Rights of Canadian Citizens?
René Mahieu (Vrije Universiteit Brussel)
H. Asghari (TU Delft - Organisation & Governance)
Christopher Parsons (University of Toronto)
Joris van Hoboken (Vrije Universiteit Brussel)
Masashi Crete-Nishihata (University of Toronto)
Andrew Hilts (University of Toronto)
Siena Anstis (University of Toronto)
More Info
expand_more
Other than for strictly personal use, it is not permitted to download, forward or distribute the text or part of it, without the consent of the author(s) and/or copyright holder(s), unless the work is under an open content license such as Creative Commons.
Abstract
We investigate empirically whether the introduction of the General Data Protection Regulation (GDPR) improved compliance with data protection rights of people who are not formally protected under GDPR. By measuring compliance with the right of access for European Union (EU) and Canadian residents, we find that this is indeed the case. We argue this is likely caused by the Brussels Effect, a mechanism whereby policy diffuses primarily through market mechanisms. We suggest that a willingness to back up its rules with strong enforcement, as it did with the introduction of the GDPR, was the primary driver in allowing the EU to unilaterally affect companies' global behavior.