UBC Undergraduate Research

Through the Kaleidoscope : Diverging Interpretations of the EU General Data Protection Regulation (GDPR) Wiertz, Milan

Abstract

Since coming into force in 2018, the General Data Protection Regulation (GDPR) has proven to be an Act of lofty ambitions but challenging implementation. With enforcement being up to regulators at the national and subnational level, accusations have been levied that the GDPR falls short of its promise to achieve harmonization among national data protection practices. This study tests such claims and endeavors to identify the motivations for divergence. It finds significant divergence between national regulators, which have led to different norms being imposed on organizations depending on their national belonging. Such heterogeneity is found to be insufficiently explained by differences in regulatory culture. Rather, the most egregious transgressions appear to be motivated by regulatory capture. The study contributes to the literature by focusing on legal interpretation, as opposed to regulatory strategy, an otherwise unaddressed aspect of regulatory differentiation in GDPR enforcement.

Item Citations and Data

Rights

Attribution-NonCommercial-NoDerivatives 4.0 International