Privacy Regulation and Data Processing Innovation: The Impact of the California Consumer Privacy Act
Paper Number
ECIS2025-1111
Paper Type
SP
Abstract
The impact of privacy regulation on innovation in the data economy is a critical topic in ongoing debates among scholars and policymakers. Despite its prominence, empirical evidence remains limited within the field of Information Systems (IS) on how privacy regulation shapes innovation. This study explores the effects of privacy regulation on data processing innovation, with particular attention to whether such regulation fosters conditions conducive to privacy-enhancing innovation. Employing a difference-in-differences approach, we analyse changes in U.S. firms’ data processing patent filings following the enforcement of the California Consumer Privacy Act. We observe a significant decline in data processing innovation—including privacy-enhancing efforts—after the CCPA’s enactment. Further analysis shows that this effect is unevenly distributed, with innovation efforts becoming more concentrated in areas with established IT sectors. This study contributes to the emerging IS literature on the impact of privacy regulations and offers insights into balancing regulation and innovation.
Recommended Citation
Klausing, Susanne and Cheng, Aaron, "Privacy Regulation and Data Processing Innovation: The Impact of the California Consumer Privacy Act" (2025). ECIS 2025 Proceedings. 1.
https://aisel.aisnet.org/ecis2025/general_track/general_track/1
Privacy Regulation and Data Processing Innovation: The Impact of the California Consumer Privacy Act
The impact of privacy regulation on innovation in the data economy is a critical topic in ongoing debates among scholars and policymakers. Despite its prominence, empirical evidence remains limited within the field of Information Systems (IS) on how privacy regulation shapes innovation. This study explores the effects of privacy regulation on data processing innovation, with particular attention to whether such regulation fosters conditions conducive to privacy-enhancing innovation. Employing a difference-in-differences approach, we analyse changes in U.S. firms’ data processing patent filings following the enforcement of the California Consumer Privacy Act. We observe a significant decline in data processing innovation—including privacy-enhancing efforts—after the CCPA’s enactment. Further analysis shows that this effect is unevenly distributed, with innovation efforts becoming more concentrated in areas with established IT sectors. This study contributes to the emerging IS literature on the impact of privacy regulations and offers insights into balancing regulation and innovation.
When commenting on articles, please be friendly, welcoming, respectful and abide by the AIS eLibrary Discussion Thread Code of Conduct posted here.