The Evolution of Personal Data Protection Frameworks: a Comparative Analysis of Legal Approaches in the United States, Russia, and Europe

This dissertation examines the effectiveness of contemporary data protection regimes through a historically grounded comparative legal analysis of the United States, Russia, and Europe. Rather than assessing data protection solely as a set of legislative norms, the study examines it as a comprehensive legal system shaped by historical traditions, institutional structures, enforcement mechanisms, resources, and underlying threat perceptions. The central research question is which regulatory model provides the most effective level of personal data protection when assessed as a coherent and functioning system rather than as a formal set of rules. The study employs a diachronic-synchronous comparative methodology, tracing the evolution of privacy and data protection from their philosophical and constitutional foundations to contemporary regulatory frameworks. The analysis demonstrates that persistent divergence between regulatory models is not primarily the result of insufficient harmonisation, but of deeply embedded legal cultures, governance priorities, and historically conditioned institutional trajectories. Despite technological convergence and increasing global coordination, contemporary reforms largely adapt existing structural logics rather than fundamentally transform them. The analysis shows that the United States prioritises sectoral regulation and flexible enforcement; Europe emphasises human rights-based coherence and institutional independence; and Russia promotes a state-centric, security-focused model centred on sovereignty and administrative control. Effectiveness is assessed based on legislative coherence, judicial interpretation, enforcement mechanisms, and systemic resilience. The dissertation concludes that no single model offers a one-size-fits-all solution. Regulatory effectiveness depends on internal coherence, institutional capacity, and the alignment between regulatory guarantees and practical implementation. By integrating historical, doctrinal, judicial, and institutional analysis, the study develops a multidimensional framework for assessing personal data protection regimes and lays the foundation for extending comparative research to other jurisdictions and developing context-sensitive normative guidance.