Melissa Dark - Purdue University
"An Analysis of Data Breach Disclosure"
Apr 01, 2009Download: MP4 Video Size: 657.9MB
Watch on YouTube
AbstractIn the past six years, 44 states in the United States have embraced a new form of privacy and identity theft regulation – mandatory disclosure of data breach information. Information disclosure regulation is a form of legislation considered effective for issues that span consumer protection and risk and where market mechanisms would/could work effectively to shape consumer and producer behavior and bring about allocative efficiency. Informational regulation is a new approach in the data privacy milieu, but has a precedent in environmental and health policy. While data breach information disclosure policies intend to have an impact on consumer and producer behavior, little is known about the costs and benefits of these policies and whether they are in fact enhancing social welfare in the area of identity theft and privacy. This talk addresses this relatively nascent public policy phenomenon with a focus on future considerations for policy analysis in this area to determine if and how such policy may be affecting the state of information assurance and security in the USA.
About the Speaker
Melissa Dark is a Professor in computer and information Technology. She has been working in information assurance and security education for almost 10 years. Roughly two years ago she became interested in the effects of public policy on user behavior, where users include individuals, organizations, and nations. She is currently on fellowship to study public policy and welfare economics with the goal of applying these approaches and tools to the field of information assurance and security.
Unless otherwise noted, the security seminar is held on Wednesdays at 4:30P.M. STEW G52 (Suite 050B), West Lafayette Campus. More information...