Data Law: Misdirected or Misdirection?

A federal data breach notification law is probably a bad idea, but not for all the reasons put forth in debates over legislation currently being considered by the U.S. Congress.

InformationWeek Staff, Contributor

August 2, 2005

3 Min Read

A federal data breach notification law is probably a bad idea, but not for all the reasons put forth in debates over legislation currently being considered by the U.S. Congress.

Economist Paul H. Rubin analyzes the costs and benefits to businesses and consumers of mandating disclosure of data breaches, in a paper for The Progress & Freedom Foundation. His analysis is representative of the typical objections to the bill before the Senate. The cost to consumers of identity theft, Rubin writes, is one tenth the cost businesses bear to remedy the fraud. He puts the expected cost per consumer at $50. Put aside Rubin's questionable assumption that the cost of a consumer's time is worth only $15 per hour. The $50 figure, which averages out certain costs to victims over the number of all consumers in the economy, downplays the real effects on consumers vs. businesses: That is, it's much easier for businesses to absorb their 90% share of the costs. An ID theft victim can be devastated for years, with trouble getting jobs, loans or leases. But a disclosure law won't help stop criminals, improve fraud detection or save consumers money.

Turns out that some businesses, such as Visa, advocate the legislation because it would preempt their liability under general tort law. Considering the general ineffectiveness of data breach notification, consumers are better off keeping their abilities to sue for damages.

— Jeanette Burriesci

Event Alert

Intelligent Enterprise Summit
Integrating and Leveraging Disparate Information Sources
Oct. 5-6, Norwalk, Conn.
www.iesummit.com

BrainStorm Group BPM, SOA, Business Rules Conferences
Sept. 22-23, Washington, D.C.
Nov. 2-3, New York
www.brainstorm-group.com

BPM Certificate of Training
Sept. 21-23, Washington, D.C.
Nov. 1-4, New York
www.bpminstitute.org/training.html

Omniture and DoubleClick Advance E-mail Analytics

Omniture has eased e-mail campaign analysis by integrating its SiteCatalyst Suite with DoubleClick's DARTmail e-mail marketing product, which is used by more than 400 large companies (including CMP Media). Users can now measure, manage and optimize outbound e-mail campaigns and cross-selling opportunities more completely as e-mail respondents click through to Web sites. Jupiter Research showed recently that 40% of e-mail marketers plan to enhance e-mail marketing with Web site clickstream data within the next 24 months.

IBM Databases Cozy up with PHP Tool

PHP, a scripting language often used to create database applications for the Web, finally has a development and production environment that includes a database programming interface. It's from Zend, whose founders created PHP. While most PHP applications now use the MySQL database, Zend Core for IBM interfaces with Cloudscape and DB2 Universal Database. IBM hopes the enterprise-class PHP enhancements it's developing with Zend will encourage upgrades from free Cloudscape to pricey DB2 as deployments grow.

Never Miss a Beat: Get a snapshot of the issues affecting the IT industry straight to your inbox.

You May Also Like


More Insights