Please use this identifier to cite or link to this item: https://hdl.handle.net/10419/285314 
Year of Publication: 
2024
Citation: 
[Journal:] Internet Policy Review [ISSN:] 2197-6775 [Volume:] 13 [Issue:] 1 [Year:] 2024 [Pages:] 1-32
Publisher: 
Alexander von Humboldt Institute for Internet and Society, Berlin
Abstract: 
This paper offers a business perspective on the EU data governance framework, particularly related to data sharing in the financial sector. With policy-making ('on the books') centred on guaranteeing data privacy and data security whilst promoting innovation, firms face complexities when implementing this framework 'on the ground'. We build on existing work in internet policy, governance and law, multidisciplinary insights from business and management studies, and equally consider practitioner reports, legal/policy documents and industry consultations. Using the Revised Payment Services Directive as an illustrative case, our exploratory analysis reveals an implementation labyrinth, with a so-called 'privacy-security-control' nexus at its core. Already problematic for firms operating across borders in the EU, this proves to be even more the case for global companies subject to various data sharing frameworks. Our analysis also reveals that the sectoral framework by the books neither reckons with the heterogeneity of firms (incumbent and new banks, fintechs and bigtechs) nor with their business models. We expose how these 'on the ground' business realities might bring unintended effects that could be further aggravated by the (inherently slower) pace of regulation, and offer recommendations for policymakers, researchers and practitioners.
Subjects: 
Data governance
Innovation
Open banking
Data privacy
Security
Persistent Identifier of the first edition: 
Creative Commons License: 
cc-by Logo
Document Type: 
Article

Files in This Item:
File
Size
383.95 kB





Items in EconStor are protected by copyright, with all rights reserved, unless otherwise indicated.