Regulating data: Evidence from corporate America

Fabio Motoki and Jedson Pinto

Journal of Business Finance & Accounting, 2025, vol. 52, issue 1, 541-568

Abstract: Using the enforcement of the General Data Protection Regulation (GDPR) as our empirical setting, we examine how stricter data privacy and data protection requirements affect shareholder wealth, firms’ investment decisions, and data breaches. Consistent with consumer privacy negatively affecting firms, we find that U.S. firms exposed to the GDPR lose 0.7%–1.1% in market value relative to unexposed firms in the week in which the regulation became enforceable. We find that the decrease in market value is partially attributable to a decrease in sales growth. GDPR‐exposed firms increase their investment above that of control firms and become less likely to report a data breach post‐regulation. The decrease in data breach likelihood is statistically and economically significant, resulting in up to 34 million records not being leaked, which costs between $205 million and $561 million to firms in breach mitigation expenses per year. The results of this study should be of interest to academics and regulators worldwide by examining the costs and benefits of regulating data.

Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
https://doi.org/10.1111/jbfa.12820

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:bla:jbfnac:v:52:y:2025:i:1:p:541-568

Ordering information: This journal article can be ordered from
http://www.blackwell ... bs.asp?ref=0306-686X

Access Statistics for this article

Journal of Business Finance & Accounting is currently edited by P. F. Pope, A. W. Stark and M. Walker

More articles in Journal of Business Finance & Accounting from Wiley Blackwell
Bibliographic data for series maintained by Wiley Content Delivery ().