Bitte verwenden Sie diesen Link, um diese Publikation zu zitieren, oder auf sie als Internetquelle zu verweisen: https://hdl.handle.net/10419/248904 
Erscheinungsjahr: 
2021
Schriftenreihe/Nr.: 
CESifo Working Paper No. 9359
Verlag: 
Center for Economic Studies and ifo Institute (CESifo), Munich
Zusammenfassung: 
This article analyzes how the General Data Protection Regulation (GDPR) has affected the privacy practices of FinTech firms. We study the content of 308 privacy statements respectively before and after the GDPR became binding. Using textual analysis methods, we find that the readability of the privacy statements has decreased. The texts of privacy statements have become longer and use more standardized language, resulting in worse user comprehension. This calls into question whether the GDPR has achieved its original goal—the protection of natural persons regarding the processing of personal data. We also analyze the content of privacy statements and link it to company- and industry-specific determinants. Before the GDPR became binding, more external investors and a higher legal capital were related to a higher quantity of data processed and more transparency, but not thereafter. Finally, we document mimicking behavior among industry peers with regard to the data processed and transparency.
Schlagwörter: 
data privacy
FinTech
General Data Protection Regulation
privacy statement
textual analysis
financial technology
JEL: 
K20
L81
Dokumentart: 
Working Paper
Erscheint in der Sammlung:

Datei(en):
Datei
Größe
478.39 kB





Publikationen in EconStor sind urheberrechtlich geschützt.