[1]
;
Svitlana Nazarko
[1]
;
Volodymyr Pekarchuk
[1]
;
Yuliia Petrovska
[1]
;
Alla Popruzhna
[1]
The strengthening of regulation of personal data protection and cybersecurity is accompanied by an increase in the number of regulatory acts and the complexity of their interaction in the digital economy. At the same time, quantitative approaches to assessing regulatory structures and their connection with law enforcement practice remain underdeveloped. The purpose of the study is to quantitatively assess the characteristics of information and personal data protection regimes in the EU, Ukraine, the United Kingdom and California, as well as analyze the relationship between regulatory density and sanction activity. The methodology includes coding 18 regulatory acts, calculating the Regulatory Density Index, analyzing the share of regulations with financial sanctions, studying law enforcement indicators for 2018–2025, and panel regression. The results showed significant differences between jurisdictions. The highest concentration of mandatory norms and financial liability is found in the EU, while Ukraine is characterized by a relatively high regulatory density but a weaker sanction component. The analysis also showed an increase in the number of fines and reports of violations in the EU. The results obtained indicate a positive relationship between regulatory architecture and sanction activity, but do not confirm a causal relationship.