Legal and Economic Analysis of Personal Data Protection

GDPR kot enega izmed ciljev ureditve določa tudi vzpostavitev prostega pretoka osebnih podatkov v EU. Doseganje tega cilja, ki ima ekonomske učinke, naj bi imelo pozitivne vplive na konkurenco in s tem na družbeno blaginjo. GDPR kot konkretizacija pravice do varstva osebnih podatkov skuša pozitivno vplivati na družbeno blaginjo s tem, da zagotavlja večji nadzor nad osebnimi podatki, kar naj bi zmanjševalo informacijske asimetrije in tako odpravljalo enega izmed položajev nepopolnosti trgov. Analiza je pokazala, da je GDPR na normativni ravni v večini primerov ustrezen pri zasledovanju tega cilja. Vendar je nadaljnja analiza, ki je temeljila na empiričnih podatkih uresničevanja privolitve in mikropravic v praksi, pokazala, da je ureditev v večini primerov delno neučinkovita, zato ne moremo potrditi, da GDPR ekonomski cilj v praksi v celoti učinkovito uresničuje. Iz tega sledi, da GDPR pri zmanjševanju informacijskih asimetrij ni v celoti uspešen, kar pomeni, da ne moremo zaključiti, da ima GDPR pozitivne učinke na družbeno blaginjo. Obdelavo osebnih podatkov, ki povzroča informacijske asimetrije, podjetja uporabljajo tudi za analizo vedenja potrošnikov na trgih, s čimer skušajo povečati svoj dobiček. S pomočjo teh analiz cenovno diskriminirajo, kar ob določenih pogojih nima nujno negativnega vpliva na družbeno blaginjo.The GDPR also sets the establishment of the free movement of personal data in the EU as one of the objectives of the regulation. Achieving this objective which has economic effects should have positive effects on competition and, consequently, on social welfare. The GDPR, as a concretization of the right to protection of personal data, tries to influence social welfare positively by providing greater control over personal data, which should reduce information asymmetries and thus eliminate one of the positions of the market failures. The analysis showed that the GDPR on the normative level is appropriate in pursuing this objective in most cases. However, further analysis based on empirical data on the exercise of consent and micro-rights in practice has shown that regulation is partially ineffective in some cases. Therefore, we cannot confirm that the GDPR implements the economic objective in practice fully effectively. Consequently, the GDPR is not entirely successful in reducing information asymmetries, which means that we cannot conclude that the GDPR has positive effects on social welfare. The processing of personal data which causes information asymmetries is also used by companies to analyze consumer behavior in the markets, thus, they try to increase their profits. Utilizing these analyzes, they discriminate in terms of price, which, under certain conditions, does not necessarily impact social welfare negatively