Do data breach disclosure laws reduce identity theft

Bibliographic Data

ID11680293
AuthorsSasha Romanosky (Carnegie Mellon University, corresponding author), Rahul Telang (0000-0002-9353-7661, Carnegie Mellon University), Alessandro Acquisti (0000-0001-6582-6178, Carnegie Mellon University)
Year2011
Volume30
Issue2
Pages256-286
Publication date2011-03-01
Peer ReviewedYes
Open AccessYes
TypeARTICLE
VenueJournal of Policy Analysis and Management (JOURNAL)
Journal identifiersISSN: 0276-8739 • E-ISSN: 1520-6688
PublisherWiley (PUBLISHER • GB)
DOI10.1002/pam.20567
OpenAlexW2322673779
LanguageEN
Citations received13
References cited30

In the United States, identity theft resulted in corporate and consumer losses of $56 billion dollars in 2005, with up to 35 percent of known identity thefts caused by corporate data breaches. Many states have responded by adopting data breach disclosure laws that require firms to notify consumers if their personal information has been lost or stolen. Although the laws are expected to reduce identity theft, their effect has yet to be empirically measured. We use panel data from the U.S. Federal Trade Commission to estimate the impact of data breach disclosure laws on identity theft from 2002 to 2009. We find that adoption of data breach disclosure laws reduce identity theft caused by data breaches, on average, by 6.1 percent. © 2011 by the Association for Public Policy Analysis and Management

Business · Commission · Data breach · Economics · Identity (music · Identity Theft · Information privacy · Internet privacy · Panel data · Political science · Privacy laws of the United States · Computer Science · Crime Patterns and Interventions · Cybercrime and Law Enforcement Studies · Information and Cyber Security · Law · Finance

Tools

Open DOISci-Hub