PAC-5010: Privacy Law and Data Protection

Wachter, S., & Mittelstadt, B. (2019). A right to reasonable inferences: Re-thinking data protection law in the age of big data and AI. Columbia Business Law Review, 2019(2), 494–620. Retrieved from https://search.ebscohost.com/login.aspx?direct=true&AuthType=sso&db=edshol&AN=edshol.hein.journals.colb2019.15&site=eds-live&scope=site&custid=s1229530

This article highlights the novel risks of inferential analytics in the context of big data and artificial intelligence and how they challenge data protection laws. Inferences drawn from highly diverse and feature-rich data create new opportunities for discriminatory and invasive decision-making, and the current legal status of inferences is heavily disputed. The article argues for the need for a new data protection right, the "right to reasonable inferences," to address the accountability gap currently posed by "high-risk inferences" and to require ex-ante justification for the reasonableness of such inferences.

Shaikh, F. A., & Joseph, D. (2019). Effects of information security legitimacy on data breach consequences: Moderating Effect of Impression Management. Proceedings of the 2019 on Computers and People Research Conference, 118–121. https://doi.org/10.1145/3322385.3322421

This article explores the relationship between information security legitimacy and firm-specific risk in the stock market. The authors argue that firms that prioritize and promote their security practices in line with stakeholder expectations are able to mitigate the financial repercussions of data breaches by using impression management techniques, such as voluntary disclosure.

Neto, N. N., Madnick, S., Paula, A. M. G. D., & Borges, N. M. (2021). Developing a global data breach database and the challenges encountered. Journal of Data and Information Quality (JDIQ) - On the Horizon, On the Horizon and Experience Papers, 13(1), 1–33. https://doi.org/10.1145/3439873

This article presents a database of the top 430 largest data breach incidents of personal information that occurred in 2018 and 2019, despite the strong efforts of regulatory agencies worldwide to enforce strict rules on data protection and privacy. The lack of standardization in reporting created many complications, highlighting the challenges of proper visibility of such incidents on a global scale and the need to improve data quality and consistency in breach reporting.

Mudassar Aslam, Muhammad Abbas Khan Abbasi, Tauqeer Khalid, Rafi us Shan, Subhan Ullah, Tahir Ahmad, Saqib Saeed, Dina A. Alabbad, & Rizwan Ahmad. (2022). Getting smarter about smart cities: Improving data security and privacy through compliance. Sensors, 22(9338), 9338. https://doi.org/10.3390/s22239338

This paper explores the benefits of smart cities in terms of increased efficiency and accessibility, as well as the risks associated with the huge amounts of data exchanged through digital interconnectivity, IoT applications, and big data analysis. The paper discusses the importance of preventing data breaches and information leakage incidents, and highlights the impact such incidents can have on citizens' well-being. Additionally, the paper provides insights into various preventive measures, including security mechanisms, laws, standards, procedures, and best practices to ensure the confidentiality and integrity of personal and critical information.

Crossler, R. E., Long, J. H., Loraas, T. M., & Trinkle, B. S. (2017). The impact of moral intensity and ethical tone consistency on policy compliance. Journal of Information Systems, 31(2), 49–64. https://doi.org/10.2308/isys-51623

This study examines the impact of moral intensity and inconsistent ethical tone on Bring Your Own Device (BYOD) policy compliance, which is a key part of an organization's system of internal controls to protect organizational assets. The study conducted an online experiment to evaluate the efficacy of interventions to foster policy compliance and found that moral intensity positively influences compliance, while an inconsistent ethical tone can erode policy compliance intentions with important theoretical and practical implications.

Whitler, K. A., & Farris, P. W. (2017, March 1). The impact of cyber attacks on brand image: why proactive marketing expertise is needed for managing data breaches. Journal of Advertising Research, 57(1), 3. Retrieved from https://search.ebscohost.com/login.aspx?direct=true&AuthType=sso&db=edsinc&AN=edsinc.A488324395&site=eds-live&scope=site&custid=s1229530

Data breaches have become increasingly difficult to control with the growth in the number and sophistication of the attacks. The failure of many firms to manage the problem effectively has caused the potential breakdown between brand and consumer trust. However, marketers can protect their brands and customers by being proactively involved in data security.

Waller, B. B., & McCafferty, E. (2022). The necessary evolution of state data breach notification laws: Keeping pace with new threats, quantum decryption, and the rapid expansion of technology. Washington and Lee Law Review, 79(1), 521. Retrieved from https://search.ebscohost.com/login.aspx?direct=true&AuthType=sso&db=edsgao&AN=edsgcl.708734551&site=eds-live&scope=site&custid=s1229530

This article discusses how the legal framework for data breach notification laws is struggling to keep up with the rapid advancement of technology, including quantum computing and artificial intelligence, and evolving cyber threats. The author argues that the current laws need to be re-evaluated and re-formulated to address these challenges in a modern era.

John Wiley & Sons (Producer), (2017). Why personal information is big business online. [Video/DVD] John Wiley & Sons. https://video.alexanderstreet.com/watch/why-personal-information-is-big-business-online