Varieties of enforcement strategies post-GDPR: a fuzzy-set qualitative comparative analysis (fsQCA) across data protection authorities

References

• Adam, C., & Hurka, S. (2021). Regulatory styles and their implications. In M. Howlett, & J. Tosun (Eds.), The Routledge Handbook of Policy Styles (pp. 355–365). Routledge Taylor & Francis Group.
   Google Scholar
• Baldwin, R. (1990). Why rules don’t work. The Modern Law Review, 53(3), 321–337. https://doi.org/10.1111/j.1468-2230.1990.tb01815.x
   Google Scholar
• Bardach, E., & Kagan, R. A. (1982). Going by the Book: The problem of regulatory unreasonableness. Temple University Press.
   Google Scholar
• Bastings, L., Mastenbroek, E., & Versluis, E. (2017). The other face of Eurolegalism: The multifaceted convergence of national enforcement styles. Regulation & Governance, 11(3), 299–314. https://doi.org/10.1111/rego.12126
   Web of Science ®Google Scholar
• Bignami, F. (2011). Cooperative legalism and the non-Americanization of European regulatory styles: The case of data privacy. The American Journal of Comparative Law, 59(2), 411–461. https://doi.org/10.5131/AJCL.2010.0017
   Web of Science ®Google Scholar
• Borraz, O., Beaussier, A., Wesseling, M., Demeritt, D., Rothstein, H., Hermans, M., Huber, M., & Paul, R. (2020). Why regulators assess risk differently: Regulatory style, business organization, and the varied practice of risk based food safety inspections across the EU. Regulation & Governance, 16(1), 274–292. https://doi.org/10.1111/rego.12320.
   Web of Science ®Google Scholar
• Braithwaite, J., Walker, J., & Grabosky, P. (1987). An enforcement taxonomy of regulatory agencies. Law & Policy, 9(3), 325-351. https://doi.org/10.1111/j.1467-9930.1987.tb00414.x
   Google Scholar
• Brave. (2020). Europe’s Governments are failing the GDPR. https://brave.com/wp-content/uploads/2020/04/Brave-2020-DPA-Report.pdf.
   Google Scholar
• Daigle, B., & Khan, M. (2020). The EU general data protection regulation: An analysis of enforcement trends by EU data protection authorities. Journal of International Commerce and Economics, (May), 1–38.
   Google Scholar
• de Boer, N. (2019). Street-level enforcement style: A multidimensional measurement instrument. International Journal of Public Administration, 42(5), 380–391. https://doi.org/10.1080/01900692.2018.1465954
   Web of Science ®Google Scholar
• DLA Piper. (2021). DLA Piper GDPR Fines and Data Breach Survey: January 2021. https://inform.dlapiper.com/10/5202/uploads/data-breach-report-2021.pdf?intIaContactId = I9fETUGUQgmKirw0UcWYZg%3d%3d&intExternalSystemId = 1.
   Google Scholar
• European Data Protection Board (EDPB). (2020). Contribution of the EDPB to the evaluation of the GDPR under article 97.
   Google Scholar
• Flaherty, D. (1998). Controlling surveillance: Can privacy protection be made effective?’. In P. Agre, & M. Rotenberg (Eds.), Technology and Privacy: The New Landscape (pp. 167–192). The MIT Press.
   Google Scholar
• Gilardi, F. (2002). Policy credibility and delegation to independent regulatory agencies: A comparative empirical analysis. Journal of European Public Policy, 9(6), 873–893. https://doi.org/10.1080/1350176022000046409
   Web of Science ®Google Scholar
• Hartlapp, M. (2014). Enforcing social Europe through labour inspectorates: Changes in capacity and cooperation across Europe. West European Politics, 37(4), 805–824. https://doi.org/10.1080/01402382.2014.919772
   Web of Science ®Google Scholar
• Hawkins, K. (1984). Environment and enforcement. Regulation and the social definition of pollution. The Claredon Press.
   Google Scholar
• Hijmans, H. (2016a). The European Union as Guardian of Internet Privacy: The Story of Art 16 TFEU. Springer.
   Google Scholar
• Hijmans, H. (2016b). The DPAs and their cooperation: How far are we in making enforcement of data protection law more European? European Data Protection Law Review, 2(3), 362–372. https://doi.org/10.21552/EDPL/2016/3/11
   Google Scholar
• Howlett, M. (1991). Policy instruments, policy styles and policy implementation: National approaches to theories of instrument choice. Policy Studies Journal, 19(2), 1–21. https://doi.org/10.1111/j.1541-0072.1991.tb01878.x
   Web of Science ®Google Scholar
• Hutter, B. (1989). Variations in regulatory enforcement styles. Law & Policy, 11(2), 153–174. https://doi.org/10.1111/j.1467-9930.1989.tb00024.x
   Google Scholar
• Hutter, B. M., & Manning, P. K. (1990). The contexts of regulation: The impact upon health and safety inspectorates in Britain. Law & Policy, 12(2), 103–136. https://doi.org/10.1111/j.1467-9930.1990.tb00043.x
   Google Scholar
• Information Commissioner Office (ICO). (2019). Evaluation of the GDPR under article 97 – questions to data protection authorities / European data protection board: Answers from the UK Supervisory Authority.
   Google Scholar
• Jordana, J., Xavier, F. M., & Bianculli, A. C. (2018). Agency proliferation and the globalization of the regulatory state: Introducing a data set on the institutional features of regulatory agencies. Regulation & Governance, 12(4), 524–540. https://doi.org/10.1111/rego.12189
   Web of Science ®Google Scholar
• Kelemen, R. D. (2011). Eurolegalism: The transformation of law and regulation in the European Union. Harvard University Press.
   Google Scholar
• Knill, C. (1998). European policies: The impact of national administrative traditions. Journal of Public Policy, 18(1), 1–28. https://doi.org/10.1017/S0143814X98000014
   Google Scholar
• Koop, C. (2014, September). Theorizing and explaining voluntary accountability. Public Administration, 92(3), 565–581. https://doi.org/10.1111/padm.12058.
   Web of Science ®Google Scholar
• Liu, N., Van Rooij, B., & Lo, C. W. H. (2018). Beyond deterrent enforcement styles: Behavioural intuitions of Chinese environmental law enforcement agents in a context of challenging inspections. Public Administration, 96(3), 497–512. https://doi.org/10.1111/padm.12415
   Web of Science ®Google Scholar
• May, P. J., & Burby, R. (1998). Making sense out of regulatory enforcement. Law & Policy, 20(2), 157–182. https://doi.org/10.1111/1467-9930.00046
   Google Scholar
• May, P. J., & Winter, S. C. (2000). Reconsidering styles of regulatory enforcement: Patterns in Danish agro- environmental inspection. Law & Policy, 22(2), 143–173. https://doi.org/10.1111/1467-9930.00089
   Google Scholar
• May, P., & Winter, S. (2011). Explaining regulatory compliance. In C. Parker, & V. Lehmann Nielsen (Eds.), Explaining Compliance. Business Responses to Regulation (pp. 222–244). Edward Elgar.
   Google Scholar
• McAllister, L. K. (2010). Dimensions of enforcement style: Factoring in regulatory autonomy and capacity. Law and Policy, 32(1), 61–78. https://doi.org/10.1111/j.1467-9930.2009.00308.x.
   Web of Science ®Google Scholar
• Raab, C., & Szekely, I. (2017). Data protection authorities and information technology. Computer Law & Security Review, 33(4), 421–433. https://doi.org/10.1016/j.clsr.2017.05.002
   Web of Science ®Google Scholar
• Ragin, C. (2000). Fuzzy set social science. University of Chicago Press.
   Google Scholar
• Ragin, C. (2008). Redesigning social inquiry. Fuzzy sets and beyond. University of Chicago Press.
   Google Scholar
• Ragin, C. C., Drass, K. A., & Davey, S. (2006). Fuzzy-set/qualitative comparative analysis 2.0. Tucson, Arizona: Department of Sociology, University of Arizona, 23(6), 1949–1955.
   Google Scholar
• Ragin, C., & Fiss, P. (2008). Net effects versus configurations: An empirical demonstration. In C. Ragin (Ed.), Redesigning Social Inquiry: Fuzzy Sets and beyond (pp. 190–212). University of Chicago Press.
   Google Scholar
• Richardson, J. (1982). Convergent policy styles in Europe. In J. Richardson (Ed.), Policy styles in Western Europe (pp. 197–209). George Allen & Unwin.
   Google Scholar
• Righettini, M. S. (2011). Institutionalization, leadership, and regulative policy style: A France/Italy comparison of data protection authorities. Journal of Comparative Policy Analysis: Research and Practice, 13(2), 143–164. https://doi.org/10.1080/13876988.2011.555995
   Web of Science ®Google Scholar
• Rijpma, J. J. (2020). The New Data Protection Regime: Setting Global Standards for the Right to Personal Data Protection. The Proceedings of the XXIX FIDE Congress in the Hauge, Volume 2. https://fide2020.eu/wp-content/uploads/2020/09/FIDE_OA_vol_2.pdf.
   Google Scholar
• Schneider, C. Q., & Wagemann, C. (2012). Set-theoretic methods for the social sciences. A guide to qualitative comparative analysis. Cambridge University Press.
   Google Scholar
• Scholten, M. (2017). Mind the trend! enforcement of EU law has been moving to ‘Brussels’. Journal of European Public Policy, 24(9), 1348–1366. https://doi.org/10.1080/13501763.2017.1314538
   Web of Science ®Google Scholar
• Scholz, J. (1994). Managing regulatory enforcement. In D. H. Roosenbloom, & R. D. Schwartz (Eds.), Handbook of regulation and administrative law (pp. 423–463). Marcel Decker.
   Google Scholar
• Strunz, S., Gawel, E., Lehmann, P., & Söderholm, P. (2018). Policy convergence as a multifaceted concept: The case of renewable energy policies in the European union. Journal of Public Policy, 38(3), 361–387. https://doi.org/10.1017/S0143814X17000034
   Web of Science ®Google Scholar
• Thomann, E., & Maggetti, M. (2017). Designing research with qualitative comparative analysis (QCA): Approaches, challenges, and tools. Sociological Methods & Research, 49(2), 356–386. https://doi.org/10.1177/0049124117729700
   Google Scholar
• Van Waarden, F. (1995). Persistence of national policy styles: A study of their institutional foundations. In F. Van Waarden, & B. Unger (Eds.), Convergence or diversity? Internationalization and economic policy response (pp. 333–372). Avebury.
   Google Scholar
• Versluis, E. (2003). Enforcement Matters: Enforcement and compliance of European Directives in four member states. Eburon.
   Google Scholar
• Versluis, E. (2007). Even rules, uneven practices: Opening the ‘Black Box’ of EU law in action. West European Politics, 30(1), 50–67. https://doi.org/10.1080/01402380601019647
   Web of Science ®Google Scholar
• Vinocur, N. (2019). We have a huge problem: European tech regulator despairs over lack of enforcement. Politico.com. https://www.politico.com/news/2019/12/27/europe-gdpr-technology-regulation-089605.
   Google Scholar
• Vogel, D. (2011). The Transatlantic Shift in Health, Safety & Environmental Risk Regulation, 1960 to 2010. APSA 2011 Annual Meeting Paper, https://papers.ssrn.com/sol3/papers.cfm?abstract_id = 1901855.
   Google Scholar
• Voss, W. G., & Bouthinon-Dumas, H. (2021). EU general data protection regulation sanctions in theory and in practice. Santa Clara High Tech. L.J., 37(1), 1–96. https://digitalcommons.law.scu.edu/chtlj/vol37/iss1/2.
   Google Scholar