<> <http://www.w3.org/2000/01/rdf-schema#comment> "The repository administrator has not yet configured an RDF license."^^<http://www.w3.org/2001/XMLSchema#string> . <> <http://xmlns.com/foaf/0.1/primaryTopic> <https://discovery.ucl.ac.uk/id/eprint/10205245> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://purl.org/ontology/bibo/Thesis> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://purl.org/ontology/bibo/Article> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://purl.org/dc/terms/title> "Privacy at the intersection of technology, business and regulation: A case study of the GDPR"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://purl.org/ontology/bibo/abstract> "Technological advances have outpaced privacy safeguards, enabling unprecedented corporate and government surveillance that threatens fundamental human\r\nrights. Individuals can counter with privacy-enhancing technologies (PETs) and\r\nlegal options but face an unequal battle. This thesis investigates the effectiveness\r\nof the General Data Protection Regulation (GDPR) in redressing this power\r\nimbalance by analyzing its impact on key stakeholders since 2018.\r\nFirst, it presents new insights into why business embraced the GDPR. While\r\nthe benefits to consumers (increased rights) and regulators (stronger powers)\r\nare well-documented, the upside for business is less understood. Interviews\r\nwith senior executives reveal that the threat of fines acted as a catalyst for\r\ndata infrastructure modernization, strengthening the compliance function and\r\nyielding multiple direct and indirect benefits.\r\nSecond, a consumer survey investigates if those who had worked before, during, and after 2018 in companies that had implemented the GDPR perceived\r\nthe regulation as beneficial in hindsight. Findings show the regulation sensitized\r\nemployees to responsible data management within their companies, raising expectations of companies at large. This, in turn, cultivated public support.\r\nThird, the research expands our understanding of how regulators are judged.\r\nSurveys and interviews with information security executives, digital rights advocates, and regulators unpack subjective effectiveness assessments. A crucial\r\nfinding is the weak feedback loop: regulators lack robust accountability mechanisms. The thesis proposes standardized reporting practices and Key Performance Indicators (KPIs) to facilitate benchmarking and improve transparency.\r\nFinally, new ground is broken by imagining the evolution of the GDPR using\r\nfuture-thinking theory. It identifies four lead indicators to monitor and forecast\r\nits positioning and relevance in changing environments. Overall, this thesis\r\ndeepens our understanding of the success of the GDPR model. It sheds light\r\non the factors underpinning its ongoing support by stakeholders and proposes\r\na framework for evaluating future data protection regulator performance"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://purl.org/dc/terms/date> "2025-02-28" . <https://discovery.ucl.ac.uk/id/document/1831656> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://purl.org/ontology/bibo/Document> . <https://discovery.ucl.ac.uk/id/org/ext-a64c3df5861c6582807add1abaadf2af> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://xmlns.com/foaf/0.1/Organization> . <https://discovery.ucl.ac.uk/id/org/ext-a64c3df5861c6582807add1abaadf2af> <http://xmlns.com/foaf/0.1/name> "UCL (University College London)"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://purl.org/dc/terms/issuer> <https://discovery.ucl.ac.uk/id/org/ext-a64c3df5861c6582807add1abaadf2af> . <https://discovery.ucl.ac.uk/id/org/ext-8f7ed5b3450912d77936e05323506a1f> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://xmlns.com/foaf/0.1/Organization> . <https://discovery.ucl.ac.uk/id/org/ext-8f7ed5b3450912d77936e05323506a1f> <http://xmlns.com/foaf/0.1/name> "Computer Science, UCL (University College London)"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/org/ext-8f7ed5b3450912d77936e05323506a1f> <http://purl.org/dc/terms/isPartOf> <https://discovery.ucl.ac.uk/id/org/ext-a64c3df5861c6582807add1abaadf2af> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://purl.org/dc/terms/issuer> <https://discovery.ucl.ac.uk/id/org/ext-8f7ed5b3450912d77936e05323506a1f> . <https://discovery.ucl.ac.uk/id/org/ext-a64c3df5861c6582807add1abaadf2af> <http://purl.org/dc/terms/hasPart> <https://discovery.ucl.ac.uk/id/org/ext-8f7ed5b3450912d77936e05323506a1f> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://purl.org/ontology/bibo/status> <http://purl.org/ontology/bibo/status/unpublished> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://purl.org/dc/terms/creator> <https://discovery.ucl.ac.uk/id/person/ext-e61ff5e52b11e52c9f3496c45209dc89> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://purl.org/ontology/bibo/authorList> <https://discovery.ucl.ac.uk/id/eprint/10205245#authors> . <https://discovery.ucl.ac.uk/id/eprint/10205245#authors> <http://www.w3.org/1999/02/22-rdf-syntax-ns#_1> <https://discovery.ucl.ac.uk/id/person/ext-e61ff5e52b11e52c9f3496c45209dc89> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://www.loc.gov/loc.terms/relators/EDT> <https://discovery.ucl.ac.uk/id/person/ext-756566b3788c5d75fcdae3f0518c38b0> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://purl.org/ontology/bibo/editorList> <https://discovery.ucl.ac.uk/id/eprint/10205245#editors> . <https://discovery.ucl.ac.uk/id/eprint/10205245#editors> <http://www.w3.org/1999/02/22-rdf-syntax-ns#_1> <https://discovery.ucl.ac.uk/id/person/ext-756566b3788c5d75fcdae3f0518c38b0> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://www.loc.gov/loc.terms/relators/EDT> <https://discovery.ucl.ac.uk/id/person/ext-630fceea38193130bb787a957d673df6> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://purl.org/ontology/bibo/editorList> <https://discovery.ucl.ac.uk/id/eprint/10205245#editors> . <https://discovery.ucl.ac.uk/id/eprint/10205245#editors> <http://www.w3.org/1999/02/22-rdf-syntax-ns#_2> <https://discovery.ucl.ac.uk/id/person/ext-630fceea38193130bb787a957d673df6> . <https://discovery.ucl.ac.uk/id/person/ext-630fceea38193130bb787a957d673df6> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://xmlns.com/foaf/0.1/Person> . <https://discovery.ucl.ac.uk/id/person/ext-630fceea38193130bb787a957d673df6> <http://xmlns.com/foaf/0.1/givenName> "T"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/person/ext-630fceea38193130bb787a957d673df6> <http://xmlns.com/foaf/0.1/familyName> "Caulfield"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/person/ext-630fceea38193130bb787a957d673df6> <http://xmlns.com/foaf/0.1/name> "T Caulfield"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/person/ext-e61ff5e52b11e52c9f3496c45209dc89> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://xmlns.com/foaf/0.1/Person> . <https://discovery.ucl.ac.uk/id/person/ext-e61ff5e52b11e52c9f3496c45209dc89> <http://xmlns.com/foaf/0.1/givenName> "Gerard"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/person/ext-e61ff5e52b11e52c9f3496c45209dc89> <http://xmlns.com/foaf/0.1/familyName> "Buckley"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/person/ext-e61ff5e52b11e52c9f3496c45209dc89> <http://xmlns.com/foaf/0.1/name> "Gerard Buckley"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/person/ext-756566b3788c5d75fcdae3f0518c38b0> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://xmlns.com/foaf/0.1/Person> . <https://discovery.ucl.ac.uk/id/person/ext-756566b3788c5d75fcdae3f0518c38b0> <http://xmlns.com/foaf/0.1/givenName> "I"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/person/ext-756566b3788c5d75fcdae3f0518c38b0> <http://xmlns.com/foaf/0.1/familyName> "Becker"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/person/ext-756566b3788c5d75fcdae3f0518c38b0> <http://xmlns.com/foaf/0.1/name> "I Becker"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://eprints.org/ontology/EPrint> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://eprints.org/ontology/ThesisEPrint> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://purl.org/dc/terms/isPartOf> <https://discovery.ucl.ac.uk/id/repository> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://eprints.org/ontology/hasDocument> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831656> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://eprints.org/ontology/Document> . <https://discovery.ucl.ac.uk/id/document/1831656> <http://www.w3.org/2000/01/rdf-schema#label> "Privacy at the intersection of technology, business and regulation: A case study of the GDPR (Text)"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://purl.org/dc/elements/1.1/hasVersion> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://eprints.org/ontology/hasAccepted> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831656> <http://eprints.org/ontology/hasFile> <https://discovery.ucl.ac.uk/id/eprint/10205245/2/GBThesis_Final.pdf> . <https://discovery.ucl.ac.uk/id/document/1831656> <http://purl.org/dc/terms/hasPart> <https://discovery.ucl.ac.uk/id/eprint/10205245/2/GBThesis_Final.pdf> . <https://discovery.ucl.ac.uk/id/eprint/10205245/2/GBThesis_Final.pdf> <http://www.w3.org/2000/01/rdf-schema#label> "GBThesis_Final.pdf"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://eprints.org/ontology/hasDocument> <https://discovery.ucl.ac.uk/id/document/1831658> . <https://discovery.ucl.ac.uk/id/document/1831658> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://eprints.org/ontology/Document> . <https://discovery.ucl.ac.uk/id/document/1831658> <http://www.w3.org/2000/01/rdf-schema#label> "Privacy at the intersection of technology, business and regulation: A case study of the GDPR (Other)"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/document/1831658> <http://eprints.org/relation/isVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831658> <http://eprints.org/relation/isVolatileVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831658> <http://eprints.org/relation/isIndexCodesVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831658> <http://eprints.org/ontology/hasFile> <https://discovery.ucl.ac.uk/id/eprint/10205245/4/indexcodes.txt> . <https://discovery.ucl.ac.uk/id/document/1831658> <http://purl.org/dc/terms/hasPart> <https://discovery.ucl.ac.uk/id/eprint/10205245/4/indexcodes.txt> . <https://discovery.ucl.ac.uk/id/eprint/10205245/4/indexcodes.txt> <http://www.w3.org/2000/01/rdf-schema#label> "indexcodes.txt"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://eprints.org/ontology/hasDocument> <https://discovery.ucl.ac.uk/id/document/1831659> . <https://discovery.ucl.ac.uk/id/document/1831659> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://eprints.org/ontology/Document> . <https://discovery.ucl.ac.uk/id/document/1831659> <http://www.w3.org/2000/01/rdf-schema#label> "Privacy at the intersection of technology, business and regulation: A case study of the GDPR (Other)"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/document/1831659> <http://eprints.org/relation/isVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831659> <http://eprints.org/relation/isVolatileVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831659> <http://eprints.org/relation/islightboxThumbnailVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831659> <http://eprints.org/ontology/hasFile> <https://discovery.ucl.ac.uk/id/eprint/10205245/5/lightbox.jpg> . <https://discovery.ucl.ac.uk/id/document/1831659> <http://purl.org/dc/terms/hasPart> <https://discovery.ucl.ac.uk/id/eprint/10205245/5/lightbox.jpg> . <https://discovery.ucl.ac.uk/id/eprint/10205245/5/lightbox.jpg> <http://www.w3.org/2000/01/rdf-schema#label> "lightbox.jpg"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://eprints.org/ontology/hasDocument> <https://discovery.ucl.ac.uk/id/document/1831660> . <https://discovery.ucl.ac.uk/id/document/1831660> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://eprints.org/ontology/Document> . <https://discovery.ucl.ac.uk/id/document/1831660> <http://www.w3.org/2000/01/rdf-schema#label> "Privacy at the intersection of technology, business and regulation: A case study of the GDPR (Other)"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/document/1831660> <http://eprints.org/relation/isVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831660> <http://eprints.org/relation/isVolatileVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831660> <http://eprints.org/relation/ispreviewThumbnailVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831660> <http://eprints.org/ontology/hasFile> <https://discovery.ucl.ac.uk/id/eprint/10205245/6/preview.jpg> . <https://discovery.ucl.ac.uk/id/document/1831660> <http://purl.org/dc/terms/hasPart> <https://discovery.ucl.ac.uk/id/eprint/10205245/6/preview.jpg> . <https://discovery.ucl.ac.uk/id/eprint/10205245/6/preview.jpg> <http://www.w3.org/2000/01/rdf-schema#label> "preview.jpg"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://eprints.org/ontology/hasDocument> <https://discovery.ucl.ac.uk/id/document/1831661> . <https://discovery.ucl.ac.uk/id/document/1831661> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://eprints.org/ontology/Document> . <https://discovery.ucl.ac.uk/id/document/1831661> <http://www.w3.org/2000/01/rdf-schema#label> "Privacy at the intersection of technology, business and regulation: A case study of the GDPR (Other)"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/document/1831661> <http://eprints.org/relation/isVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831661> <http://eprints.org/relation/isVolatileVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831661> <http://eprints.org/relation/ismediumThumbnailVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831661> <http://eprints.org/ontology/hasFile> <https://discovery.ucl.ac.uk/id/eprint/10205245/7/medium.jpg> . <https://discovery.ucl.ac.uk/id/document/1831661> <http://purl.org/dc/terms/hasPart> <https://discovery.ucl.ac.uk/id/eprint/10205245/7/medium.jpg> . <https://discovery.ucl.ac.uk/id/eprint/10205245/7/medium.jpg> <http://www.w3.org/2000/01/rdf-schema#label> "medium.jpg"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://eprints.org/ontology/hasDocument> <https://discovery.ucl.ac.uk/id/document/1831662> . <https://discovery.ucl.ac.uk/id/document/1831662> <http://www.w3.org/1999/02/22-rdf-syntax-ns#type> <http://eprints.org/ontology/Document> . <https://discovery.ucl.ac.uk/id/document/1831662> <http://www.w3.org/2000/01/rdf-schema#label> "Privacy at the intersection of technology, business and regulation: A case study of the GDPR (Other)"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/document/1831662> <http://eprints.org/relation/isVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831662> <http://eprints.org/relation/isVolatileVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831662> <http://eprints.org/relation/issmallThumbnailVersionOf> <https://discovery.ucl.ac.uk/id/document/1831656> . <https://discovery.ucl.ac.uk/id/document/1831662> <http://eprints.org/ontology/hasFile> <https://discovery.ucl.ac.uk/id/eprint/10205245/8/small.jpg> . <https://discovery.ucl.ac.uk/id/document/1831662> <http://purl.org/dc/terms/hasPart> <https://discovery.ucl.ac.uk/id/eprint/10205245/8/small.jpg> . <https://discovery.ucl.ac.uk/id/eprint/10205245/8/small.jpg> <http://www.w3.org/2000/01/rdf-schema#label> "small.jpg"^^<http://www.w3.org/2001/XMLSchema#string> . <https://discovery.ucl.ac.uk/id/eprint/10205245> <http://www.w3.org/2000/01/rdf-schema#seeAlso> <https://discovery.ucl.ac.uk/id/eprint/10205245/> . <https://discovery.ucl.ac.uk/id/eprint/10205245/> <http://purl.org/dc/elements/1.1/title> "HTML Summary of #10205245 \n\nPrivacy at the intersection of technology, business and regulation: A case study of the GDPR\n\n" . <https://discovery.ucl.ac.uk/id/eprint/10205245/> <http://purl.org/dc/elements/1.1/format> "text/html" . <https://discovery.ucl.ac.uk/id/eprint/10205245/> <http://xmlns.com/foaf/0.1/primaryTopic> <https://discovery.ucl.ac.uk/id/eprint/10205245> .