, SecurityFocus 2008-06-25
The breach-notification laws passed by many states have failed, so far, to produce a measurable impact on identity theft, according to a group of academic researchers that will present their findings on Thursday at the Workshop on the Economics of Information Security (WEIS).
Expand all |
Post comment
They aren't meant to prevent data breaches, except by forcing companies to admit they messed up, and punish them if they don't. If they didn't exist, how many companies would be forthright enough to own up to losing data?
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/articles/11524/35174#35174