Robust Regulation of Firms' Access to Consumer Data

I study how to regulate firms’ access to consumer data when a regulator faces non-Bayesian uncertainty about how firms will exploit the consumer’s information to segment the market and set prices. I fully characterize all worst-case optimal policies when the regulator maximizes consumer surplus: the regulator allows a firm to access data only if the firm cannot use the database to identify a small group of consumers.