More Than a Suspect: An Investigation into the Connection Between Data Breaches, Identity Theft, and Data Breach Notification Laws

Research output: Contribution to journalArticleScientificpeer-review

4 Downloads (Pure)

Abstract

This article investigates the relationship between data breaches and identity theft, including the impact of Data Breach Notification Laws (DBNL) on these incidents (using empirical data and Bayesian modeling). We collected incident data on breaches and identity thefts over a 13-year timespan (2005–2017) in the United States. Our analysis shows that the correlation is driven by the size of a state. Enacting a DBNL still slightly reduces rates of identity theft; while publishing breaches notifications by Attorney Generals helps the broader security community learning about them. We conclude with an in-depth discussion on what the European Union can learn from the US experience.
Original languageEnglish
Pages (from-to)45-82
Number of pages38
JournalJournal of Information Policy
Volume10
DOIs
Publication statusPublished - 2020

Keywords

  • Data breach notification laws
  • Data breaches
  • Identity theft

Fingerprint Dive into the research topics of 'More Than a Suspect: An Investigation into the Connection Between Data Breaches, Identity Theft, and Data Breach Notification Laws'. Together they form a unique fingerprint.

Cite this