Data Breach Laws: Do They Work?
Joseph H. Schuessler, Del Nagy, H. Kevin Fulk, Art Dearing · Journal of Applied Security Research · 2017
This study explores the relationship between data breach laws and breaches that have occurred before and after legislation was enacted. Rampant breaches occurring, as evidenced by those at Home Depot, Community Health Systems, JPMorgan/Chase, and so on, helps to illustrate the vulnerability of organizational systems. Data breach laws have two purposes: (a) inform those affected by loss of personally identifiable information and (b) encourage organizations to secure their systems in order to avoid the negative publicity of data breaches. Results of the effect that data breach laws and the number of data breach occurrences are analyzed and implications discussed.