Print Email Facebook Twitter More Than a Suspect: An Investigation into the Connection Between Data Breaches, Identity Theft, and Data Breach Notification Laws Title More Than a Suspect: An Investigation into the Connection Between Data Breaches, Identity Theft, and Data Breach Notification Laws Author Bisogni, F. (TU Delft Organisation & Governance) Asghari, H. (TU Delft Organisation & Governance) Date 2020 Abstract This article investigates the relationship between data breaches and identity theft, including the impact of Data Breach Notification Laws (DBNL) on these incidents (using empirical data and Bayesian modeling). We collected incident data on breaches and identity thefts over a 13-year timespan (2005–2017) in the United States. Our analysis shows that the correlation is driven by the size of a state. Enacting a DBNL still slightly reduces rates of identity theft; while publishing breaches notifications by Attorney Generals helps the broader security community learning about them. We conclude with an in-depth discussion on what the European Union can learn from the US experience. Subject Data breach notification lawsData breachesIdentity theft To reference this document use: http://resolver.tudelft.nl/uuid:26c096c9-e97a-4033-8dc5-b930c0fb64e2 DOI https://doi.org/10.5325/JINFOPOLI.10.2020.0045 ISSN 2381-5892 Source Journal of Information Policy, 10, 45-82 Part of collection Institutional Repository Document type journal article Rights © 2020 F. Bisogni, H. Asghari Files PDF jinfopoli.10.2020.0045.pdf 7.87 MB Close viewer /islandora/object/uuid:26c096c9-e97a-4033-8dc5-b930c0fb64e2/datastream/OBJ/view