Cyber Law, Data Protection, and Regulatory Challenges in Digital Business Ecosystems

This study examines how cyber law and data protection regimes affect the security and operational outcomes of digital companies, with empirical results at the forefront. Harmonized data on 45 jurisdictions, from 2015 to 2024, are sorted by the type of regime, namely, comprehensive (15), sectoral (15), and emerging (15), and evaluated with country fixed-effects models. The average breach rate for the three regime types stands at 23.1, 25.8, and 25.9 incidents per 1,000 digital companies, while average compliance costs decrease from 6.6% of revenues in comprehensive to 4.1% in emerging regimes. Within jurisdiction, each additional enforcement action per 1,000 firms decreases the breach rate by 0.70, each percentage point of regulatory maturity by 0.19, and each percentage point of digital adoption increases it by 0.29. A ransomware year increases the breach rate by 2.3 breaches, which gets offset in a year. Increased compliance costs go hand in hand with slower growth for digital companies (-0.54 percentage points per point of revenue). Policy scenarios show that stronger enforcement and maturity can reduce breach rates by roughly 3.3 incidents but increase compliance costs. The findings point to a trade-off that regulators should manage through proportionate, risk-based design.