More Than a Suspect: An Investigation into the Connection Between Data Breaches, Identity Theft, and Data Breach Notification Laws

Title

More Than a Suspect: An Investigation into the Connection Between Data Breaches, Identity Theft, and Data Breach Notification Laws

 Author

Bisogni, F. (TU Delft Organisation & Governance)
Asghari, H. (TU Delft Organisation & Governance) ORCID 0000-0002-7887-8417

 Date

2020

 Abstract

This article investigates the relationship between data breaches and identity theft, including the impact of Data Breach Notification Laws (DBNL) on these incidents (using empirical data and Bayesian modeling). We collected incident data on breaches and identity thefts over a 13-year timespan (2005–2017) in the United States. Our analysis shows that the correlation is driven by the size of a state. Enacting a DBNL still slightly reduces rates of identity theft; while publishing breaches notifications by Attorney Generals helps the broader security community learning about them. We conclude with an in-depth discussion on what the European Union can learn from the US experience.

 Subject

Data breach notification laws
Data breaches
Identity theft

 To reference this document use:

http://resolver.tudelft.nl/uuid:26c096c9-e97a-4033-8dc5-b930c0fb64e2

 DOI

https://doi.org/10.5325/JINFOPOLI.10.2020.0045

 ISSN

2381-5892

 Source

Journal of Information Policy, 10, 45-82

 Part of collection

Institutional Repository

 Document type

journal article

 Rights

© 2020 F. Bisogni, H. Asghari
Files
PDF jinfopoli.10.2020.0045.pdf 7.87 MB
Close viewer