Varieties of enforcement strategies post-GDPR: a fuzzy-set qualitative comparative analysis (fsQCA) across data protection authorities
Varieties of enforcement strategies post-GDPR: a fuzzy-set qualitative comparative analysis (fsQCA) across data protection authorities
复制标题
GDPR 后的各种执法策略：跨数据保护机构的模糊集定性比较分析 (fsQCA)
DOI：
--
复制
发表时间：
2022
影响因子：
4.2
通讯作者：
Ido Sivan
中科院分区：
文献类型：
--
作者：
Ido Sivan
摘要 该研究探讨了国家机构之间数据保护执法策略的差异。尽管有关跨国执法实践的文献很少，但本研究制定了数据保护执法策略和措施的规模，并比较了各机构的执法选择。基于 18 个 DPA 的调查回复、对 DPA 员工的访谈以及有关 GDPR 执行的二手资料，本文根据执行策略对 DPA 进行了聚类，分析了跨国差异，并调查了策略与行动之间的不一致。本文使用模糊集定性比较分析，测试了官僚和政治背景（组织能力、预算来源和问题显着性）如何影响执法选择。几乎一半的研究 DPA 反映了其战略的高度威慑力，但对于其中许多人来说，缺乏资源和专业知识阻碍了战略转化为实践。这项研究为理解 GDPR 后欧洲化对国家的影响提供了一个起点，为整个欧盟的执法理论提供了实证支持。
ABSTRACT The study explores the divergence in data protection enforcement strategies among national agencies. Whereas the literature on cross-national enforcement practices is scarce, this study develops a scale for data protection enforcement strategies and measures and compares enforcement choices across agencies. Based on survey responses from 18 DPAs, interviews with DPA employees, and secondary sources on GPDR enforcement, the paper clusters DPAs based on enforcement strategies, analyzes cross-national variations, and investigates misalignments between strategy and actions. Using Fuzzy-Set Qualitative Comparative Analysis, the paper tests how bureaucratic and political contexts – organizational capacities, budget sources, and issue saliency – impact enforcement choices. Almost half of the studied DPAs reflect high deterrence by their strategy, but for many of them, lack of resources and expertise inhibits the translation of strategy into practice. This study provides a starting point for understanding the national impacts of Europeanization post-GDPR, adding empirical support for theorizing about enforcement across the EU.