In a column for The Wall Street Journal, U.S. Naval Academy Assistant Prof. Jeff Kosseff, CIPP/US, writes, “the truth is that informing victims of data breaches is not very effective at stopping the damage that already has been done, or preventing future damage,” adding, “Indeed, the hyperfocus on notification is one of the largest shortcomings of the nation’s cybersecurity laws.” With consumer breach fatigue, “policy makers should rethink whether the centerpiece of the cybersecurity legal regime should be about notification,” or whether it should be about prevention. One possible solution, Kosseff argues, would be providing tax incentives to help companies invest more in preventative solutions. (Registration may be required to access this story.)
Full Story