Open Access
How to measure privacy-related consumer harm in merger analysis? : a critical reassessment of the EU Commission's merger control in data-driven markets
Loading...
Files
WP_2018_13.pdf (615.29 KB)
Full-text in Open Access
License
Cadmus Permanent Link
Full-text via DOI
ISBN
ISSN
1725-6739
Issue Date
Type of Publication
LC Subject Heading
Other Topic(s)
EUI Research Cluster(s)
Initial version
Published version
Succeeding version
Preceding version
Published version part
Earlier different version
Initial format
Author(s)
Citation
EUI LAW; 2018/13
Cite
DEUTSCHER, Elias, How to measure privacy-related consumer harm in merger analysis? : a critical reassessment of the EU Commission’s merger control in data-driven markets, EUI LAW, 2018/13 - https://hdl.handle.net/1814/58064
Abstract
This study contributes to the current debate on how privacy concerns can and should be integrated into merger analysis. First, I contend that while competition authorities increasingly account for the role of personal data as a source of market power and entry barriers, privacy-related consumer harm still remains a blind spot in merger analysis. Second, I discuss how this analytical gap can be filled by mapping out three potential theories of privacy-related consumer harm: namely, privacy as an element of product quality, privacy as a feature of consumer choice, and privacy as non-monetary price. Third, and this is my major claim and contribution, this study proposes willingness-to-pay studies in the form of conjoint analysis as a methodology that enables competition authorities to quantify privacy-related consumer harm in monetary terms. In a fourth section, this study discusses potential objections to this approach. In so doing, it shows that the widespread opposition against the incorporation of privacy into merger analysis is based on a ‘privacy fallacy’. This ‘privacy fallacy’ derives from the erroneous assumption that deteriorations in the level of privacy protection as a consequence of a merger automatically amount to a breach of data-protection rules which should be addressed by data protection authorities, but which do not constitute an antitrust concern.