Introduction
Digital technologies allow for the gathering, storage, and processing of large amounts of data in unparalleled ways. This has triggered concerns regarding governments’ ability to harvest enormous amounts of information on citizens and the consequences of surveillance on privacy rights and democracy. The 2019 COVID pandemic increased these concerns; not only did democracies around the world enact one or more forms of digital surveillance to contain the spread of the pandemic, but the unprecedented reliance on digital communication technologies in many parts of the world provided large amounts of digitized data that could be gathered by governments.
Even before the COVID pandemic, but especially in its context, several organizations, academics, and rights groups warned against the dangers digital surveillance poses to democracies and advocate regulatory measures to protect citizens’ online privacy (Eck and Hatz Reference Eck and Hatz2020; Shahbaz and Funk Reference Shahbaz and Funk2020). Despite common agreement on the importance of protecting citizens’ privacy, online privacy protection laws differ among democracies. For instance, in South Korea, the Personal Information Protection Act exempts authorities from adhering to data processing limitations in cases related to national security; in such cases, authorities can gather personal data (age, financial information, and Internet traffic when available) from any number of individuals (Ministry of the Interior and Safety and Korea Law Translation Center 2023). New Zealand exempts intelligence agencies from several provisions of the Privacy Act, regardless of whether the information obtained is necessary for national security (Ministry of Justice 2020). The UK’s Data Protection Act exempts different authorities from data protection provisions in different scenarios and even grants the state secretary the power to decide on additional exemptions, while Portugal’s law does not specify any such exemptions (Assembleia Da Repùblica 2019; UK Government 2018).
The unprecedented global reliance on digital surveillance during the pandemic sheds light on the connection between privacy and democracy. Not only has the pandemic exposed variations in the extent to which democracies are capable of curbing the privacy rights of their citizens, but it has also emphasized the relevance of the nexus between privacy and democracy (Greitens Reference Greitens2020). Amid the pandemic, while Israel authorized an emergency procedure that allowed it to employ a counter-terrorist surveillance program to enforce and monitor quarantine orders among its citizens, Sweden did not amend its existing legislations in any manner (Daskal Reference Daskal2022; Swedish Parliament 2018; Wikin and Sjöblom Reference Wikin and Sjöblom2023). Even within Europe, where the GDPR is expected to harmonize such crisis responses, member states significantly varied in their legal responses to the pandemic (Grogan Reference Grogan2022).
What accounts for the variations in how democracies legally handle citizens’ online privacy? Most existing work focuses on the variation between the US and continental Europe, and legal scholars have presented socio-legalistic accounts of this variation in only a limited number of cases (Cordeiro Reference Cordeiro2019; Richie Reference Richie2010; Rodríguez and Alimonti Reference Rodríguez and Alimonti2020). While the COVID-19 pandemic accelerated interest in the relationship between privacy and democracy, most studies have focused on how pandemic-fueled practices have affected the quality and future of democratic rule (Bol, Giani, Blais et al. Reference Bol, Giani, Blais and Loewen2021; Esaiasson, Sohlberg, Ghersetti et al. Reference Esaiasson, Sohlberg, Ghersetti and Johansson2021; Vasilopoulos et al. Reference Vasilopoulos, McAvay, Brouard and Foucault2023).
In this paper, we investigate the reverse side of this inquiry: Rather than asking how (changes in) privacy protection affect democracy, we ask whether and how different dimensions of democratic rule relate to the legal protection of citizens’ online privacy. To address this question, we investigated and compared the relationships between the two phenomena before and after the COVID pandemic.
The pandemic was an exogenous factor that drove many democracies to amend their legal frameworks to allow some measure of digital surveillance. In the context of democratic backsliding and changes in the quality of democracy and its different dimensions in recent years (variations in the independent variable), the pandemic introduced a variation in the dependent variable (changes in the legal framework underpinning governments’ access to citizens’ online data) within a short time, allowing us to more thoroughly investigate the relationship between variations in democracy and online privacy protection. The COVID pandemic presented a unique opportunity – a natural experiment – to investigate whether specific dimensions of democratic rule protect citizens’ online privacy from government infringement during times of crisis.
Thus, our research pursues two lines of investigation. The first asks whether some dimensions of democratic rule are generally associated with more protective online privacy laws. The second inquires whether certain dimensions of democracy could have influenced the evolution of the legal framework protecting citizens’ online data from governmental access.
We focus on the legal aspect of privacy protection because legal frameworks are essential for the functioning of democracies, as they uphold individual autonomy, protect civil liberties, and reinforce the rule of law. Privacy is not merely a personal concern; it is also instrumental in maintaining the integrity of democratic processes. By embedding privacy rights within the legal system, democracies affirm their commitment to individual freedom and the equitable application of justice, reinforcing the foundational structures that support a free and open society.
In this paper, section ‘Privacy, democracy, and crises in the digital age’ illustrates that variations in democratic rule are overlooked as factors influencing how well democracies protect their citizens’ online privacy; we also show that while the relationship between privacy and democracy has been enjoying an increasing interest since COVID, most studies have focused on how privacy affects democracies, largely overlooking ways in which varieties of democracy affect online privacy. Section ‘Which dimension of democracy would lead to better privacy protection laws?’ formulates several hypotheses on how the different dimensions of democracy relate to variations in the extent to which the law protects citizens’ online privacy. In doing so, we scratch the surface of the theoretical discussion of the minimal requisites of democracy and the differentiation between democracy and other concepts such as liberalism and deliberation. These are broad issues in political theory; holistic engagement with these debates, although important, is beyond the scope of this study. Our theoretical starting point is that while democracies share a set of core procedures and rights, they vary in their stress on particular rights and procedures. We focus on developing hypotheses that link the different conceptions of democracy to the extent to which democracies protect their citizens’ online privacy. To do so, we utilize data on different varieties of democracy from the Varieties of Democracy (V-Dem) project and rely on the Digital Society Project’s data on online privacy regulations to test our hypotheses. Section ‘Methods’ discusses our methodology in detail.
Our main findings in section ‘Regime-type and online privacy laws: an unexpected tale’ provide a nuanced picture of the relationship among democracy, its dimensions, and the extent of legal online privacy protection in democracies. Our cross-case comparison shows a strong association between the general level of democracy and the quality of online privacy laws. However, this relationship becomes weaker when we measure changes in the general level of democracy from before the pandemic and how they relate to changes in online privacy laws during the pandemic. Surprisingly, while one could expect the liberal dimension to be most positively associated with protection against government infringements on privacy, it comes second in significance to participation’s positive effect on online privacy laws during the pre-pandemic period. Even more surprisingly, changes in the egalitarian dimension of democracy in the years preceding the pandemic had a stronger protective effect than the liberal dimension on online privacy protection laws, as they changed during the pandemic. We conclude with a discussion on the policy and academic relevance of our findings.
Privacy, democracy, and crises in the digital age
In contrast to other forms of information, digitized data can be easily collected and juxtaposed from different sources and devices. Digital data are mostly cross-readable, and user data collected on social media can be triangulated with other data generated by users’ behavior on streaming or online shopping platforms to form accurate and well-rounded information about users’ preferences, attitudes, and behavior (Saglam Reference Saglam2022). In addition, some studies have shown that digital transformation is anchored in an economic structure that incentivizes data generation with little concern for privacy, social rights, or democracy (Culpepper and Thelen Reference Culpepper and Thelen2020; Zuboff Reference Zuboff, Longhofer and Winchester2023).
Democracies have responded by legally protecting citizens’ online data from government exploitation, especially in light of increasing concerns regarding the authoritarian uses of digital technologies (Diamond Reference Diamond2019; Freedom House 2018; Glasius and Michaelsen Reference Glasius and Michaelsen2018; Keremoğlu and Weidmann Reference Keremoğlu and Weidmann2020; Kendall-Taylor, Frantz and Wright Reference Kendall-Taylor, Frantz and Wright2020). As reported by the United Nations Department of Economic and Social Affairs, ‘[a]s more social and economic activities are placed online, the importance of privacy and data protection is increasingly recognized. Equal concerns are the collection, use, and sharing of personal information with third parties without the notice or consent of consumers’ (UN DESA 2022: 180).
Data from the Digital Society Project (DSP) show an increase in the number of democracies over the last 20 years that have enacted laws geared toward protecting citizens’ online data from governments (see Figure 1). However, the same data also show significant variation in the extent to which laws restrict government access to citizens’ online data (see Figure 2).
More countries have adopted online privacy laws over time.

Map of the content of privacy regulation across countries (both democracies and non-democracies). The bluer shades indicate more protective laws.

Few efforts have been made to uncover the political causes of this variation. Existing works primarily offer legalistic and often descriptive accounts of privacy laws in a limited number of cases, with a few exceptions (Carrillo and Jackson Reference Carrillo and Jackson2022; Chavarría-Mora Reference Chavarría-Mora2025; Lim and Oh Reference Lim and Oh2025) that have paid particular attention to a comparison of privacy laws in the US and continental Europe. For instance, Whitman argues that different culturally embedded conceptions of privacy underlie the stark differences between European and US privacy regulations (Whitman Reference Whitman2003). Custers et al. provide a descriptive account of privacy laws in the EU before 2018 (Custers, Dechesne, Sears, et al. Reference Custers, Dechesne, Sears, Tani and Van der Hof2018). Notwithstanding their merits, these studies do not engage with potential politicosystemic variations that might influence such variations.
The pandemic has further crystallized the nexus between digitization, democracy, and privacy and illustrated how legal responses to crisis situations differ among democracies. Several studies have examined the impact of privacy violations and emergency legal instruments on the quality and future of democracy. For instance, colleagues in the V-Dem project painted a mixed picture of promising and worrying global trends affecting democracy amid the pandemic. However, they have not systematically engaged in the variations among democracies. Instead, they highlight the democracy-adherent performance of high-income Western democracies and the innovation of medium- and low-income democracies (Edgell and Lachapelle Reference Edgell and Lachapelle2021). Kneuer and Wurster (Reference Kneuer and Wurster2022) make a strong point for a research agenda that investigates particular areas of vulnerability to emergency situations in democracies, adherence to democratic procedures in implementing crisis-mitigation policies, the justification or framing of government responses, and a comparison of democratic and authoritarian responses (Kneuer and Wurster Reference Kneuer and Wurster2022). They theorized how the pandemic could have affected different democratic procedures, such as elections and civil freedoms, in the long run (ibid.). Greitens illustrates how pandemic responses are more proportional and respectful of democratic principles in established democracies but facilitate backsliding in weaker democracies (Greitens Reference Greitens2020).
However, few studies have investigated the impact of democracy and its dimensions on privacy violation patterns in democratic countries. Engler et al. pursued this line of investigation in 34 European countries and concluded that variations in the degree of democracy and political liberalism are behind variation in the extent to which these countries violated citizens’ rights (Engler, Brunner, Loviat et al. Reference Engler, Brunner, Loviat, Abou-Chadi, Leemann, Glaser and Kübler2021). Maati and Švedkauskas investigated whether the degree of democratic backsliding and liberalism influenced how governments framed and justified digital surveillance measures during the pandemic (Maati and Švedkauskas Reference Maati and Švedkauskas2020). Some advocacy organizations have also documented that a higher pre-pandemic quality of democracy and liberal institutions shielded citizens’ rights from government infringement (Saravakos and Archontas Reference Saravakos and Archontas2022).
The focus of these works on the liberal dimension of democracy is unsurprising considering the close association between liberal institutions, practices, and individual rights, both historically and intuitively. Yet existing work offers little insight as to how the liberal dimension fares vis-à-vis other dimensions of democracy in relation to civil rights and liberties. Focusing on online privacy protection, we have formulated several hypotheses below, not only on how the general quality of democracy can affect online privacy protection but also on how the different dimensions of democratic rule might relate to online privacy protection in democracies.
Which dimension of democracy would lead to better privacy protection laws?
Seminal works on democratic theory have proposed several (procedural) criteria that qualify democratic rule. More recent theorization has focused on distilling various dimensions of democracy by focusing on institutional arrangements and procedures culminating in the exercise of democracy. We derived different theoretical expectations regarding the impact of different dimensions of democracy on a country’s online privacy regulations. The V-Dem dataset is a pioneering project in this line of theorization (Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Altman, Bernhard, Cornell, Fish, Gastaldi, Gjerløw, Glynn, Good God, Grahn, Hicken, Kinzelbach, Krusell, Marquardt, McMann, Mechkova, Medzihorsky, Natsika, Neundorf, Paxton, Pemstein, Pernes, Rydén, von Römer, Seim, Sigman, Skaaning, Staton, Sundström, Tzelgov, Wang, Wig, Wilson and Ziblatt2023a). The V-Dem encompasses five holistic indices for democracy; the electoral democracy index is the main measure of democracy and closely reflects Dahl’s (Reference Dahl1989: 108–114) procedural criteria of ‘polyarchy’; the electoral democracy Index – V-Dem’s main measure of democracy – is an ‘essential element of any other conception of representative democracy’ (Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Altman, Bernhard, Cornell, Fish, Gastaldi, Gjerløw, Glynn, Grahn, Hicken, Kinzelbach, Marquardt, McMann, Mechkova, Neundorf, Paxton, Pemstein, Rydén, von Römer, Seim, Sigman, Skaaning, Staton, Sundström, Tzelgov, Uberti, Wang, Wig and Ziblatt2023b: 45). The other four indices differentiate among the liberal, participatory, deliberative, and egalitarian dimensions of democracy.
Democratic, fair, and competitive elections, as well as freedom of expression and association, are essential elements of polyarchy (V-Dem’s ‘electoral democracy’); these elements constitute the ‘inner sanctum’ of all democracies (Ibid, 44). We expect democracies that fulfill Dahl’s criteria to have online privacy laws that protect citizens’ online privacy. Thus, we formulated the following hypothesis:
H1: Higher degrees of democracy are associated with better legal protection of citizens’ online privacy.
In addition to the seminal differentiation between democracies/polyarchies and dictatorships, we can differentiate further components of democratic rule (Reference DahlDahl 2000 [1998]; Schumpeter Reference Schumpeter1943). While free, fair, and competitive elections, as well as freedom of expression and association, are essential elements of every (electoral) democracy as its ‘inner sanctum,’ the degree of the liberal, participatory, deliberative, and egalitarian components can differ among democracies. Some of these democratic components may coexist in an autocratic context (Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Altman, Bernhard, Cornell, Fish, Gastaldi, Gjerløw, Glynn, Grahn, Hicken, Kinzelbach, Marquardt, McMann, Mechkova, Neundorf, Paxton, Pemstein, Rydén, von Römer, Seim, Sigman, Skaaning, Staton, Sundström, Tzelgov, Uberti, Wang, Wig and Ziblatt2023b, Coppedge, Lindberg, Skaaning et al., Reference Coppedge, Lindberg, Skaaning and Teorell2016: 582).
Core criteria for democracy include rights, but they only do so to the extent that such rights guarantee citizens’ freedom ‘to express themselves without the danger of severe punishment’ (Dahl Reference Dahl1982, Reference Dahl1989). Freedom of association and expression are examples of rights that are integral to electoral democracy; without these rights, freedom from expression with no fear of punishment cannot exist. Major streams of democratic theory and the V-Dem data consider some fundamental rights – for instance, the right to expression and assembly – as the definitional criteria of democratic rule.
However, democracies vary in the extent to which some individual rights exist (Dahl Reference Dahl1989: 223); they also manifest different degrees of control over executive power (O’Donnell 1998: 113–115). V-Dem’s democracy indices are in line with this view, and the liberal component of democracy emphasizes the protection of individual rights against both the tyranny of the state and the tyranny of the majority (Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Altman, Bernhard, Cornell, Fish, Gastaldi, Gjerløw, Glynn, Grahn, Hicken, Kinzelbach, Marquardt, McMann, Mechkova, Neundorf, Paxton, Pemstein, Rydén, von Römer, Seim, Sigman, Skaaning, Staton, Sundström, Tzelgov, Uberti, Wang, Wig and Ziblatt2023b). By stressing the protection of civil liberties, the rule of law, an independent judiciary, and checks and balances, this component measures how strong (institutional) barriers are against the extensive exercise of executive power. Among all dimensions of democracy, we expect the liberal to be the strongest associate to strong online privacy protection laws since civil rights are at the center of this understanding of democracy. Thus, the following hypothesis was proposed:
H2: The stronger individual rights and checks on executive power—the liberal component of democracy—exist in a democracy, the more protective its online privacy regulations.
Democracies also vary in the extent of citizenship participation (Pateman Reference Pateman2014). The participation dimension of democracy stresses the importance of citizens’ active political participation at all levels; it emphasizes engagement in civil society organizations, direct democracy, and subnational elected bodies (Barber Reference Barber1988; Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Altman, Bernhard, Cornell, Fish, Gastaldi, Gjerløw, Glynn, Grahn, Hicken, Kinzelbach, Marquardt, McMann, Mechkova, Neundorf, Paxton, Pemstein, Rydén, von Römer, Seim, Sigman, Skaaning, Staton, Sundström, Tzelgov, Uberti, Wang, Wig and Ziblatt2023b: 45; Fung and Wright Reference Fung and Wright2003; Moon, Birdsall, Ciesluk et al. Reference Moon, Birdsall, Ciesluk, Garlett, Hermias, Mendenhall, Schmid and Wong2006).
The ideal extent of participation is, however, debated in democratic theory, and not all lines of theorization agree that more participation necessarily leads to better democratic politics (Dahl Reference Dahl1989). Without considering important nuances, one could divide this debate between a view that considers unlimited participation – widespread participation outside of election times – as a catalyst for political inefficacy and bad decisions (Dahl Reference Dahl1989; Lewis Reference Lewis2013; Schumpeter Reference Schumpeter1943) and another view that holds widespread participation as a guarantee of citizen representation and rights (Pateman Reference Pateman2012, Reference Pateman2014). The first results in policy paralysis; the second in enhancing citizens’ representation, control of the agenda, and general influence on politics.
We derive two competing hypotheses regarding the effect of increased participation on online privacy protection laws. Higher levels of participation could lead to the overpoliticization of privacy concerns. One could argue that high politicization, with its focus on public contestation, can be accompanied by a reduction in individual privacy protection. On the other hand, in political systems where participatory principles are consistently upheld, citizens may experience privacy not merely as an individual right but as a collective guarantee that their voices can be expressed without fear of penalization or reprisal, which may in turn lead to stronger privacy protection. The following two hypotheses are derived from these arguments:
H3a: Higher levels of participation are associated with weaker online privacy protection laws in democracies.
H3b: Higher levels of participation are associated with stronger online privacy protection laws in democracies.
The deliberative aspect of democratic rule focuses on public debates and political decision-making (Bächtiger, Dryzek, Mansbridge et al. Reference Bächtiger, Dryzek, Mansbridge and Warren2018; Dryzek Reference Dryzek2002) as well as whether public reasoning focused on the common good motivates political decision-making (Bühlmann, Merkel, Müller et al. Reference Bühlmann, Merkel, Müller and Wessels2012; Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Altman, Bernhard, Cornell, Fish, Gastaldi, Gjerløw, Glynn, Grahn, Hicken, Kinzelbach, Marquardt, McMann, Mechkova, Neundorf, Paxton, Pemstein, Rydén, von Römer, Seim, Sigman, Skaaning, Staton, Sundström, Tzelgov, Uberti, Wang, Wig and Ziblatt2023b; Morlino Reference Morlino2011). The ideal of this principle of democratic decision-making is a respectful dialogue among informed and competent political participants who are open to persuasion and willing to give public justifications for their positions on matters of public goods while acknowledging and respecting counterarguments (Habermas Reference Habermas1992; Steiner, Bächtiger, Spörndli et al. Reference Steiner, Bächtiger, Spörndli and Steenbergen2005). Thus, one can argue that individual freedoms and privacy rights are prerequisites for individuals participating in political dialogue as autonomous actors as well as helping build mutual respect and trust among participants in a deliberation process. Deliberation might include mutual respect regarding public goods, including privacy rights. However, privacy rights are not at the center of the deliberative dimension of democracy, which is geared more toward the achievement of effectively sharing public goods; participants can come to an agreement after a process of reason-based deliberation (Held Reference Held2006). The following hypothesis was thus formulated:
H4: Levels of deliberation have no significant impact on the extent of protection online privacy laws grant citizens in a democracy.
Major strands of democratic theory consider at least minimal equality, particularly equality of votes, among citizens to be necessary as the very foundation of democratic rule (Reference DahlDahl 1990 [1970]: 8–11). The question of egalitarianism – equal access to resources and an equal distribution of rights among social groups – has been largely debated regarding whether it is a consequence of democratic rule (Acemoglu and Robinson Reference Acemoglu and Robinson2006; Boix Reference Boix2003). However, more recent works have stressed egalitarianism as an integral component of democracy and have highlighted its importance for democratic stability (Rau and Stokes Reference Rau and Stokes2025).
An equal distribution of rights and resources among different social groups in a democracy – the egalitarian dimension of democracy – indirectly relates to better privacy rights and protection from online surveillance by governments. While the liberal dimension is directly concerned with minimizing executive powers, the egalitarian component aims to prevent inequalities from ‘inhibit[ing] the exercise of formal rights and liberties’ (Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Altman, Bernhard, Cornell, Fish, Gastaldi, Gjerløw, Glynn, Grahn, Hicken, Kinzelbach, Marquardt, McMann, Mechkova, Neundorf, Paxton, Pemstein, Rydén, von Römer, Seim, Sigman, Skaaning, Staton, Sundström, Tzelgov, Uberti, Wang, Wig and Ziblatt2023b, 46), even if this equality evokes tension with the utilitarian logic entrenched in earlier strands of democratic theory. Therefore, we hypothesize that higher levels of egalitarianism positively affect online privacy protection laws and expect this relationship to be weaker than that linking liberalism to stronger privacy protection:
H5: Higher levels of egalitarianism are weakly associated with better online privacy protection laws in democracies.
We tested the above hypotheses over a long period as well as during the COVID pandemic crisis. All political regimes, including democracies, have the capacity to suspend several rights, including privacy rights. This phenomenon has been well documented in the securitization literature (Buzan, Weaver, and de Wilde Reference Buzan, Weaver and de Wilde1998), particularly in the literature examining digital surveillance during the global public health crisis of COVID (Maati and Švedkauskas Reference Maati and Švedkauskas2020). We expect higher levels of democracy to mediate the negative effects of the COVID crisis on online privacy protection laws. We also expect democracies with stronger liberal dimensions to be more immune to the deterioration of online privacy protection. We examined the above hypotheses to look at the effect of different democratic dimensions on online privacy protection laws during both normal and crisis situations.
Methods
We tested these hypotheses using panel data from the DSP (Mechkova, Pemstein, Seim et al. Reference Mechkova, Pemstein, Seim and Wilson2022b). The DSP includes different measures of the important elements that accompanied digital transformation in many countries between 2000 and 2021. We mainly focus on the DSP’s aggregated interval measure of the content of online privacy regulation laws, which investigates what ‘the legal framework [does] to protect Internet users’ privacy, and [what] their data stipulate’ (Mechkova, Pemstein, Seim et al. Reference Mechkova, Pemstein, Seim and Wilson2022a: 22). The original ordinal variable allows five different responses to the question (see Figure 3); it is, however, converted to an interval variable that ‘aggregates the ratings provided by multiple country experts and, taking disagreement and measurement error into account, produces a probability distribution over country-year scores on a standardized interval scale’ (Mechkova, Pemstein, Seim et al. Reference Mechkova, Pemstein, Seim and Wilson2022a: 4). A baseline of 0 represents the interval variable’s mean overall country years; this allows us, in contrast to an ordinal measure, to accurately interpret variations in the dependent variable over a long period, both between and within cases. Thus, for our purposes, we concur with the coders that this is the ‘preferred version[s] of the variable[s] for time series regression and other estimate strategies’ (Mechkova, Pemstein, Seim et al. Reference Mechkova, Pemstein, Seim and Wilson2022a: 22).
The content of privacy protection law as measured by the Digital Society Project (Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Altman, Bernhard, Cornell, Fish, Gastaldi, Gjerløw, Glynn, Grahn, Hicken, Kinzelbach, Marquardt, McMann, Mechkova, Neundorf, Paxton, Pemstein, Rydén, von Römer, Seim, Sigman, Skaaning, Staton, Sundström, Tzelgov, Uberti, Wang, Wig and Ziblatt2023b).

Independent and control variables
We use democracy measures for the same period (2000–2021) from the V-Dem dataset (V-Dem Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Altman, Bernhard, Cornell, Fish, Gastaldi, Gjerløw, Glynn, Good God, Grahn, Hicken, Kinzelbach, Krusell, Marquardt, McMann, Mechkova, Medzihorsky, Natsika, Neundorf, Paxton, Pemstein, Pernes, Rydén, von Römer, Seim, Sigman, Skaaning, Staton, Sundström, Tzelgov, Wang, Wig, Wilson and Ziblatt2023a). The V-Dem differentiates between a general measure of democracy – the ‘electoral democracy index’ – and democracy component indices. The electoral democracy index resembles Dahl’s (Reference Dahl1989) procedural minimum for democratic rule, or polyarchy; the variable assigns each country year a score between 0 (most authoritarian) and 1 (most democratic); the threshold for democracy lies at 0.5 (Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Marquardt, Medzihorsky, Pemstein, Gastaldi, Grahn, Pernes, Rydén, von Römer, Tzelgov, Wang and Wilson2023c: 6). It measures the degree to which ‘the core value of making rulers responsive to citizens, achieved through electoral competition for the electorate’s approval under circumstances when suffrage is extensive; political and civil society organizations can operate freely; elections are clean and not marred by fraud or systematic irregularities; and elections affect the composition of the chief executive of the country. Between elections, there is freedom of expression and an independent media capable of presenting alternative views on matters of political relevance’ (Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Altman, Bernhard, Cornell, Fish, Gastaldi, Gjerløw, Glynn, Grahn, Hicken, Kinzelbach, Marquardt, McMann, Mechkova, Neundorf, Paxton, Pemstein, Rydén, von Römer, Seim, Sigman, Skaaning, Staton, Sundström, Tzelgov, Uberti, Wang, Wig and Ziblatt2023b: 44).
In addition to the general democracy measure of polyarchy, the V-Dem measures four dimensions of democracy: liberal, participatory, deliberative, and egalitarian. We tested how each of these dimensions relates to the legal protection of citizens’ online privacy in democracies. V-Dem captures variations in these dimensions in two ways: The corresponding high-level democracy indices capture how closely any case reflects a respective dimension of democracy, and the high-level indices of the four democracy dimensions are constituted by aggregating the country score on a particular dimension and its score on the general measure of democracy (the electoral democracy index). Mid-level indices capture each of these dimensions without considering a case’s score on the main ‘electoral’ democracy index, enabling an accurate estimation of how these different dimensions of democracy relate to privacy protection laws. The liberal component averages a case’s score on equality before the law, individual liberties, judicial, and executive checks on the executive (Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Altman, Bernhard, Cornell, Fish, Gastaldi, Gjerløw, Glynn, Grahn, Hicken, Kinzelbach, Marquardt, McMann, Mechkova, Neundorf, Paxton, Pemstein, Rydén, von Römer, Seim, Sigman, Skaaning, Staton, Sundström, Tzelgov, Uberti, Wang, Wig and Ziblatt2023b: 50). The participatory component averages the scores of civil society participation, local and regional government power, and direct popular votes (Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Altman, Bernhard, Cornell, Fish, Gastaldi, Gjerløw, Glynn, Grahn, Hicken, Kinzelbach, Marquardt, McMann, Mechkova, Neundorf, Paxton, Pemstein, Rydén, von Römer, Seim, Sigman, Skaaning, Staton, Sundström, Tzelgov, Uberti, Wang, Wig and Ziblatt2023b: 52). The deliberative component measures the extent of society’s engagement, respect of counterarguments, focus on the common good and reasoned justifications, and range of consultations (Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Altman, Bernhard, Cornell, Fish, Gastaldi, Gjerløw, Glynn, Grahn, Hicken, Kinzelbach, Marquardt, McMann, Mechkova, Neundorf, Paxton, Pemstein, Rydén, von Römer, Seim, Sigman, Skaaning, Staton, Sundström, Tzelgov, Uberti, Wang, Wig and Ziblatt2023b: 55). The egalitarian component captures the extent of the equal distribution of resources, equal protection of civil liberties, and equal access to power across different social groups in a society (Coppedge, Gerring, Knutsen et al. Reference Coppedge, Gerring, Knutsen, Lindberg, Teorell, Altman, Bernhard, Cornell, Fish, Gastaldi, Gjerløw, Glynn, Grahn, Hicken, Kinzelbach, Marquardt, McMann, Mechkova, Neundorf, Paxton, Pemstein, Rydén, von Römer, Seim, Sigman, Skaaning, Staton, Sundström, Tzelgov, Uberti, Wang, Wig and Ziblatt2023b: 56).
We also hypothesize that there is a likelihood of an association, even if not causal, between the level of (economic) development and good governance (Khouya and Benabdelhadi Reference Khouya and Benabdelhadi2020); it is reasonable to believe that the level of economic development influences a state’s ability to produce laws that better protect citizens’ privacy. Therefore, we control for GDP (constant 2015 US$) as measured by World Bank data (World Bank 2021). We do not include measures of state capacity as they largely relate to aspects of democracy and/or GDP.
Model specification and case inclusion criteria
Several ordinary least squares (OLS) and mixed regression models were developed to test our hypotheses. Since our analysis focuses on the variation in online privacy protection laws within democracies, we exclude years that fall short of the democracy threshold. The DSP dataset contains cases with a polyarchy score consistency higher than 0.5 for all years and others that fluctuate below or above this threshold. In our analysis, we included all country-years with polyarchy scores higher than 0.5. We examined a total of 113 countries, divided between those that scored consistently higher than 0.5 between 2000 and 2021 (n = 65) and those scoring higher than 0.5 for at least one year and lower than 0.5 for at least one year (n = 48).Footnote 1 Thus, we included all years for stable democracies and democratic years of unstable democracies (see Section 7 in the online Appendix).
The analysis below relies on different modeling strategies to capture two different types of variation in our data. In general, our data have a significantly more pronounced between-subject than within-subject variation (see Section 5.1 in the online Appendix). Of the 113 cases we examined, the privacy scores of only 55 changed during the examined period; of these, the scores of only 23 cases witnessed any change before the pandemic. The unequal within-subject variance among the cases on the one hand, and the lack of within-subject variance in many on the other, prevent us from relying on fixed or mixed effects models, respectively.
To test whether differences of democracy measures between countries matter for formal online privacy protection, we examined this relationship over a long period before the pandemic. To do so, we averaged both the democracy and privacy law scores for all included country-years between 2000 and 2018 and modeled them using an OLS regression (n = 113). This strategy allowed us to test for general relationships between the dependent and independent variables in the context of within-case variance in the dependent variable.
The pandemic presented a public health crisis that justified the introduction of swift and sudden restrictions on several civil and political rights in democracies in the context of a global decline in the number and quality of democracies. Accordingly, more than half of the cases with varying privacy law scores over time witnessed such variance in the years of the pandemic. Our analysis also tested whether the changes in democracy scores were related to changes in online privacy law scores during the pandemic. The analysis employed OLS regression to model the change in democracy measures between 2016 and 2021 against the change in online privacy scores from 2018 to 2021. We used online privacy law scores in 2018 as a reference point for the status of privacy law for each case before the pandemicFootnote 2 and chose a wider timespan (2016–2021) for our measures of democracy for two reasons. First, fluctuations in democracy scores over a short period can present a misleading trend and introduce noise to the data. Second, we wanted to account for the potential lagged effect between changes in democracy scores and its potential subsequent effect on online privacy laws. Examining this lagged effect enabled us to infer how changes – regression or consolidation – in different dimensions of democracy that did not occur because of the pandemic mediated the (negative) effect of the pandemic crisis on online privacy protection laws.
These strategies captured the between-case variations in general associations as well as changes over time. In addition to this between-case variation of 113 cases, we modeled within-case variation of the 55 cases that had privacy law scores that had changed during the examined period (2000–2021) using mixed regression models. Mixed models enable filtering out between-case variations and random effects and account for the correlation of residuals that occur owing to repeated measures of the same cases over time.
Regime-type and online privacy laws: an unexpected tale
The empirical findings presented in this section paint a mixed picture of how the different dimensions of democracy relate to online privacy protection laws in times of normality and crises. In ‘normal’ pre-pandemic times, the degree of polyarchy – the general electoral democracy measure – is positively associated with formal online privacy protection from the government as seen in Table 1 (Model 1). Our analysis also exposes liberalism and participation as the only democratic dimensions significantly related to formal online privacy protection in pre-pandemic times in Table 2 (Model 2).
Model 1 – the association between the degree of democracy and online privacy protection laws pre-pandemic (2000–2018)

Table 1. Long description
A table with one row and five columns. The columns are labeled Model, Adjusted R square, R square change, Sum of squares, GDP_prepandemic, and Polyarchy_prepandemic. Row 1: Model 1, Adjusted R square 0.201, R square change 0.215, Sum of squares 22.781, GDP_prepandemic -0.126, Polyarchy_prepandemic 0.521*
Notes: *p < 0.001, dependent variable: Privacy law pre-pandemic.
Model 2 – he association between different democracy dimensions and online privacy protection law pre-pandemic (2000–2018)

Table 2. Long description
A table with 2 rows and 8 columns comparing the association between different democracy dimensions and online privacy protection laws pre-pandemic (2000-2018). The columns are Model, Adjusted R square, R square change, Sum of squares, GDP_pre-pandemic, Liberal dimension pre-pandemic, Participatory dimension pre-pandemic, Deliberative dimension pre-pandemic, and Egalitarian dimension pre-pandemic. Row 1: Model, 2. Row 2: Adjusted R square, 0.192; R square change, 0.228; Sum of squares, 24.155; GDP_pre-pandemic, -0.114; Liberal dimension pre-pandemic, 0.322*; Participatory dimension pre-pandemic, 0.311**; Deliberative dimension pre-pandemic, -0.011; Egalitarian dimension pre-pandemic, -0.006.
Notes: *p < 0.05, **p < 0.01, dependent variable: Privacy law pre-pandemic
While we expected the liberal dimensions to manifest the strongest positive effect on citizens’ online privacy protection against government infringements, this relationship, surprisingly, was found to have a weaker statistical significance than that of the participatory dimension. In section ‘Which dimension of democracy would lead to better privacy protection laws?’, we presented two competing hypotheses on how heightened participation could relate to online privacy protection. We argue that participation can be negatively associated with such protection, since heightened politicization could hinder the development of individual protection or positively associated with citizens’ enhanced ability to set the political agenda. The above results not only support the latter view but also invite further reflection on why such an association is more significant than that of the liberal dimension despite the latter being theoretically more directly relatable to more protective privacy laws.
Consistent with our expectations, Model 3 shows a strong association between changes in the degree of polyarchy, the general measure of democracy, between 2016 and 2021, as well as changes in formal online privacy protection during the pandemic. Consistent with our hypothesis, democracies that witnessed an improvement in their overall quality were more likely to witness positive changes in the quality of their online privacy protection laws during the pandemic.Footnote 3 We infer that, on average, democratic backsliding regression in a democracy’s general measure of democracy is associated with worse outcomes of online privacy protection laws during the pandemic. However, this association was stronger in normal pre-pandemic times than during the COVID pandemic crisis because crises trigger emergency measures in democracies, regardless of their overall quality. However, the democracies that had consolidated better quality democratic tendencies in the years preceding the pandemic witnessed positive changes in their online privacy protection laws during the pandemic (Table 3).
Model 3 – the effect of changes in the quality of democracy 2016–2021 on the change in online privacy protection laws during the pandemic

Table 3. Long description
A table with five columns and one row. The columns are labeled Model, Adjusted R square, R square change, Sum of squares, Zscore (GDP_change), and polyarchy_change. The row data is as follows: Model 3, Adjusted R square 0.030, R square change 0.052, Sum of squares 0.454, Zscore (GDP_change) 0.084, polyarchy_change 0.219*.
Notes: *p < 0.05, dependent variable: Change in Privacy law, 2018–2021.
Surprisingly, and in contrast to our hypotheses, changes to the liberal dimension of democracy did not show any statistically significant effect on how online privacy protection laws changed in response to the COVID-19 pandemic. Instead, changes in the egalitarian and participatory dimensions of democracy are associated with the tendency to protect citizens’ online privacy from government infringement during crises (Table 4).Footnote 4 In other words, while democracies have managed questions about online privacy during the public health crisis differently, those that had witnessed a deterioration in the degree of the egalitarian dimension before the pandemic had, on average, less protective changes to their online privacy protection laws during the pandemic.
Model 4 – the effect of changes in liberal, egalitarian, and participatory dimensions of democracy 2016–2021 on the change in online privacy protection laws during the pandemic

Table 4. Long description
A table with one row and eight columns. The columns are labeled Model, Adjusted R square, R square change, Sum of squares, GDP change, Liberalcomp_change, Participcomp_change, delibcomp_change, and egalcomp_change. The row data is as follows: Model 4, Adjusted R square 0.105, R square change 0.155, Sum of squares 1.365, GDP change 0.102, Liberalcomp_change 0.151, Participcomp_change 0.224, delibcomp_change -0.295, egalcomp_change 0.295.
Notes: *p < 0.05, dependent variable: Change in Privacy law, 2018–2021.
Moreover, we observed surprising results when we tested how different dimensions of democracy relate to within-subject variations in online privacy protection laws. In the 55 democracies that witnessed a change in the quality of their online privacy law anytime between 2000 and 2021, the general measure of democracy—the electoral democracy index—did not relate to the extent of legal protection of citizens’ online privacy (Table 5); the egalitarian dimension proved stronger than the liberal dimension in predicting better and more protective privacy laws (Table 6).
Model 5 – within-case variation of democratic quality and its effect on within-case variation in online privacy protection laws 2000–2021

Table 5. Long description
A table with six columns and six rows, comparing model statistics for democratic quality and online privacy protection laws. The columns are labeled Model, Intercept, GDP, Polyarchy, Random intercept, Repeated-measures AR rho, -Log likelihood, and BIC. The rows present data for Model 5. Row 1: Model, 5. Row 2: Intercept, -1.780. Row 3: GDP, 0.122. Row 4: Polyarchy, 0.194. Row 5: Random intercept, 0.320*. Row 6: Repeated-measures AR rho, -0.096. Row 7: -Log likelihood, -1086.913. Row 8: BIC, -1044.895.
Notes: *p < 0.05, dependent variable: Privacy law change, (2000–2021).
Model 6 – within-case variation of democracy dimensions and their effects on within-case variation of online privacy protection laws 2000–2021

Table 6. Long description
A table with 1 row and 11 columns comparing the effects of different democracy dimensions on online privacy protection laws. The columns are Model, Intercept, Liberal Dimension GDP, Participatory Dimension, Deliberative Dimension, Egalitarian Dimension, Random Intercept, Repeated Measures AR Rho, -Log Likelihood, and BIC. Row 1: Model 6, Intercept -1.780, Liberal Dimension GDP 0.084, Participatory Dimension 0.684, Deliberative Dimension -0.096, Egalitarian Dimension 0.891, Random Intercept 0.241, Repeated Measures AR Rho 0.974, -Log Likelihood 1115.767, BIC 1052.740.
Notes: *p < 0.05, **p < 0.01, ***p < 0.001, dependent variable: Privacy law change, (2000–2021).
These findings suggest that the relationship between the different dimensions of democracy and the protection of individual rights from governmental infringement might vary unexpectedly during normal and crisis times. The extent to which a democratic system stresses individualism and general checks on executive power is positively related to more protective online privacy laws; however, this relationship seems surprisingly insignificant in our analysis of the protection of such rights during crises that provoke infringements on citizens’ privacy rights. In contrast to the liberal component, the egalitarian and participatory components showed consistent positive effects on formally protecting citizens’ online privacy, both in general and during emergencies.
Within-case analyses further complicate the relationship between democracy, its dimensions, and online privacy regulations. The lack of a significant association between changes in the general levels of democracy and online privacy laws might point to a non-linear relationship between democracy and privacy protection. While cases that enjoy higher levels of democracy tend to enjoy higher levels of formal online privacy protection, in our data, a general improvement of democratic quality within a democracy seems to be irrelevant for privacy protection. Instead, a particular improvement in the egalitarian and liberal components seems to strongly predict an improvement in online privacy laws in existing democracies. Again, our within-case analysis points to the importance of the egalitarian dimension for privacy protection, even when compared with the liberal dimension.
Democracy, liberalism, and (online privacy) laws: some critical reflections and a call for further research
Our study revealed a nuanced and multifaceted relationship between democracy and formal online privacy protection, offering both expected and surprising insights. In pre-pandemic times, the general measure of democracy—polyarchy—was positively associated with stronger formal privacy protection, reaffirming the role of democracy in safeguarding individual rights. However, the participatory dimension was a more statistically significant predictor of protective privacy laws than the liberal dimension, challenging the conventional emphasis on liberalism as the primary democratic safeguard of individual rights. This suggests that increased citizen participation enhances privacy protection. During the pandemic, the dynamics of democracy and online privacy laws shifted. While changes in the overall quality of democracy (the electoral democracy index, as measured by the V-Dem data) remained positively associated with privacy protection, this relationship weakened compared to pre-pandemic times. More notably, improvements in the egalitarian dimension of democracy were strongly linked to better privacy protection, highlighting its critical role during crises and inviting further exploration of the mechanisms underlying this relationship. Conversely, changes in the liberal dimension did not show a consistent relationship with the development of privacy laws during the pandemic, suggesting that its influence may be context-dependent.
Policymakers and scholars have traditionally prioritized the liberal dimension of democracy; however, our findings suggest that the egalitarian and participatory dimensions warrant greater attention, particularly in the context of crises or exogenous shocks. Our findings underscore a key distinction: While the liberal dimension is important for privacy protection in ‘normal’ times, participatory and egalitarian dimensions gain prominence during crises. This underscores the adaptability of democratic structures to address individual rights under various circumstances. Furthermore, the strong predictive power of the egalitarian dimension for better privacy laws in the long-term analysis of democracies with fluctuating privacy protections highlights the importance of achieving better equality in democracies as well as how it positively affects privacy rights. Understanding these dynamics can contribute to designing more inclusive and resilient democratic systems capable of safeguarding individual rights during both stable and turbulent times.
Based on our (in part) surprising results regarding the regulation of online privacy rights in different democracies, we call for further comparative research into other formal laws to enhance theory-building in this field. Do the relationships found here also exist when examining other formal laws? Further research employing multiple measures of democracy, both type and degree, is needed to test the validity of the arguments discussed above. In addition, we need more research to answer whether regime type, degree, or both matters. Without diluting the importance of examining formal laws, we already know that especially autocratic regimes are often reluctant to implement their privacy laws and readily violate citizens’ privacy without a legal basis. Therefore, additional research testing whether our findings extend to the realm of implementation is urgently needed. This is also important when investigating how the content of online privacy laws has (differently) evolved in authoritarian and democratic regimes over the last few decades. Addressing these questions will help us better understand the functioning of different political regimes and the role that formal regulations play in different contexts regarding the living conditions of citizens.
Supplementary material
The supplementary material for this article can be found at https://doi.org/10.1017/S1475676526101807
Data availability statement
Our datasets compile data from online available sources.
Acknowledgments
The authors thank Mr. Noah Dierolf and Mrs. Sandra Katharina Rubner (Student assistants) for their excellent support.
Funding statement
The authors have received no funding for carrying out this research.
Competing interests
The authors declare no conflicting interests.
Use of AI
The authors have not used AI for any purpose other than troubleshooting python syntax for the statistical analysis





