The Costs of Data Protection, in particular for SMEs

Projekt: Forschung

Projektbeteiligte

Beschreibung

There is a continuous tendency in European data protection law and regulation to increase protection standards and impose more limitations on how firms can use customer data. Data protection imposes costs on economic activity, and these costs should be recognized in data protection law and policy.

The project aimed to assess whether European and German data protection laws increase the costs of doing business for firms. The project focused in particular on costs related to efficient management of the firm (data protection could impose costs by making supervision and control of personnel more costly and therefore management less effective) and to the development and marketing of new products (data protection may make it more costly to obtain data from customers required to develop or market new products).

Should a cost benefit analysis play a more prominent role in determining whether changes to data protection are desirable, like it is used in many other areas where regulation affects business activity?

What do we know about cost awareness in SMEs, are costs od data protection empirically measurable?

Methods: Empirical study, interviews

Results: While there is a vague recognition that data protection does impose costs, it appears impossible to measure costs related to data protection in SMEs because a lack of awareness of data protection law requirements. Awareness of data protection laws and willingness to comply is developing gradually, but is still very uneven. Any meaningful measurement would have been possible only if compliance with data protection laws would have received more attention already before that last major legislative change in 2009, but before that time the topic was virtually non-existent for most SMEs.

The report shows why concerns about the costs of data protection should matter more when reforming data protection laws.

Documentation: Report (to be finalized in April 2013)

Limits: Lack of awareness of, and compliance with, data protection laws made empirical study and even report of anecdotal evidence impossible.

Follow-uo project: There were several contacts with organizations representing SMEs in Germany and the study may generate enough interest on their side to continue with a joint project.
StatusAbgeschlossen
Zeitraum01.04.1230.04.13

Zuletzt angesehen

Publikationen

  1. Dynamic efficiency and path dependencies in venture capital markets
  2. University-linked programmes for sustainable entrepreneurship and regional development
  3. Thanking and responding to thanks in American English: Language patterning and contextual appropriateness
  4. Predicting the future performance of soccer players
  5. The Crowd in Flux
  6. Passion, Performance and Soberness
  7. Transformative Impulse
  8. Microstructure-Oriented Fatigue Crack Propagation in Two Cast Mg–Al–Ba–Ca Alloys
  9. Modernization
  10. »CO2 causes a hole in the atmosphere« Using laypeople’s conceptions as a starting point to communicate climate change
  11. The hidden hand that shapes conceptual understanding: Choosing effective representations for teaching cell division and climate change
  12. On the geometric control of internal forces in power grasps
  13. Moving beyond unlearning unsustainable consumption
  14. Commitment Strategies for Sustainability
  15. Utilization of phenolic compounds by microalgae
  16. Transition management as an approach to deal with climate change
  17. Review of transit data sources
  18. Multiple forest structural elements are needed to promote beetle biomass, diversity and abundance
  19. Leaf Nutritional Content, Tree Richness, and Season Shape the Caterpillar Functional Trait Composition Hosted by Trees
  20. The Automated will
  21. Dynamic capabilities?
  22. Processability of Mg-Gd Powder via Friction Extrusion
  23. Trade-off between Production and Inventory Costs with Respect to a Given Demand Situation
  24. Understanding the bright side and the dark side of telework
  25. BBS futur 2.0