Priorities for More Effective Tech Regulation

Ad Legendum, 2023(2)

12 Pages Posted: 3 Mar 2023 Last revised: 23 May 2023

See all articles by Konrad Kollnig

Konrad Kollnig

Department of Computer Science, University of Oxford

Date Written: February 28, 2023


Ample research has demonstrated that compliance with data protection principles remains limited on the web and mobile. For example, almost none of the apps on the Google Play Store fulfil the minimum requirements regarding consent under EU and UK law, while most of them share tracking data with companies like Google/Alphabet and Facebook/Meta and would likely need to seek consent from their users. Indeed, recent privacy efforts and enforcement by Apple have had – in some regards – a more pronounced effect on apps' data practices than the EU's ambitious General Data Protection Regulation (GDPR). Given the current mismatch between the law on the books and data practices in reality, iterative changes to current legal practice will not be enough to meaningfully tame egregious data practices. Hence, this technical report proposes a range of priorities for academia, regulators and the interested public in order to move beyond the status quo.

Keywords: privacy, regulation, GDPR, mobile apps, web, tracking, technology

Suggested Citation

Kollnig, Konrad, Priorities for More Effective Tech Regulation (February 28, 2023). Ad Legendum, 2023(2), Available at SSRN: or

Konrad Kollnig (Contact Author)

Department of Computer Science, University of Oxford ( email )

Wolfson Building, Parks Road
United Kingdom

Do you have a job opening that you would like to promote on SSRN?

Paper statistics

Abstract Views
PlumX Metrics