Difference between revisions of "Much Ado About Notification: Does the Rush to Pass State-Level Data Security Regulations Benefit Consumers"

From Cybersecurity Wiki
Jump to navigation Jump to search
(New page: ==Full Title of Reference== Much Ado About Notification: Does the Rush to Pass State-Level Data Security Regulations Benefit Consumers? ==Full Citation== Thomas M. Lenard and Paul H. Ru...)
 
Line 7: Line 7:
 
Thomas M. Lenard and Paul H. Rubin, Much Ado About Notification: Does the Rush to Pass State-Level Data Security Regulations Benefit Consumers?, Regulation, Vol. 29, No. 1 (2006).  [http://papers.ssrn.com/sol3/Delivery.cfm/SSRN_ID898208_code614152.pdf?abstractid=898208&mirid=1 ''Web''] [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&view=&startkey=Lenard_Rubin:2006&f=wikibiblio.bib ''BibTeX'']
 
Thomas M. Lenard and Paul H. Rubin, Much Ado About Notification: Does the Rush to Pass State-Level Data Security Regulations Benefit Consumers?, Regulation, Vol. 29, No. 1 (2006).  [http://papers.ssrn.com/sol3/Delivery.cfm/SSRN_ID898208_code614152.pdf?abstractid=898208&mirid=1 ''Web''] [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&view=&startkey=Lenard_Rubin:2006&f=wikibiblio.bib ''BibTeX'']
  
 
 
==Categorization==
 
==Categorization==
  

Revision as of 18:53, 3 June 2010

Full Title of Reference

Much Ado About Notification: Does the Rush to Pass State-Level Data Security Regulations Benefit Consumers?

Full Citation

Thomas M. Lenard and Paul H. Rubin, Much Ado About Notification: Does the Rush to Pass State-Level Data Security Regulations Benefit Consumers?, Regulation, Vol. 29, No. 1 (2006). Web BibTeX

Categorization

Issues: Information Sharing/Disclosure

Key Words

Data security breaches

Synopsis

Data security breaches have received considerable public attention of late, and have prompted several states to mandate that firms whose data may have been compromised to notify their customers of the security breaches. This study finds that the costs of a notification requirement are likely to be substantially higher than the benefits. Even for consumers whose data have been compromised, the probability of being a victim of fraud is so low - only 2 percent - that little action is justified. Overall, we estimate that the expected benefits of mandatory notification are very small - less than $10 per compromised individual.

Additional Notes and Highlights

* Outline key points of interest