Modern Privacy Regulation, Internal Information Quality, and Operational Efficiency: Evidence from the General Data Protection Regulation

• 成果类型: Article
• 署名作者: Maex, Steven A.
• 署名单位: George Mason University
• 刊物名称: ACCOUNTING REVIEW
• ISSN/ISSBN: 0001-4826; 1558-7967
• DOI: 10.2308/TAR-2022-0542
• 发表日期: 2026-09
• 页码: 255-287
• 关键词: information governance; information management; information technology material weaknesses; RESTATEMENTS; earnings announcement speed; SHAREHOLDER LITIGATION; deficiencies; environment; disclosure

摘要

In April 2016, the European Union adopted the General Data Protection Regulation (GDPR), significantly expanding privacy protections for personal data handled by firms. I examine the regulation's impact on U.S. firms' internal information quality (IIQ) and operational efficiency. Although privacy regulations target one subset of firms' information assets (i.e., personal data), they may spur broad improvements in firms' information governance practices and systems, resulting in higher quality information available for decision-making and, by extension, more efficient operations. Using a difference-in-differences design, I find that U.S. firms with European operations (i.e., treated firms) exhibit improvements in IIQ around the adoption of the GDPR. Furthermore, although the GDPR's regulatory burden is overall costly to firms, GDPR-induced improvements in IIQ contribute positively to operational efficiency. These findings highlight that privacy regulation can act as a catalyst for firms to improve IIQ, yielding operational benefits that may partially offset the regulation's costs.