This article examines the effectiveness and relevance of EU data protection legislation. The author shows the difficulty of cost-benefit quantification and the fact that, as the instruments and institutions protecting privacy are not only costly but also a dynamic lever of performance, a static approach is not feasible. In particular, she looks at how incentive regulation, a broader version of non-environmental applications of eco-boosting, can end up promoting the competitiveness of European firms.