Accession Number:

AD1085094

Title:

Consumer Attitudes Toward Data Breach Notifications and Loss of Personal Information

Descriptive Note:

[Technical Report, Research Report]

Corporate Author:

RAND Corporation

Personal Author(s):

• Ablon, Lillian
• Heaton, Paul
• Lavery, Diane C.
• Romanosky, Sasha

Report Date:

2016-01-01

Pagination or Media Count:

78

Abstract:

Data breaches continue to plague private-sector companies, nonprofit organizations, and government agencies. Although spending on cybersecurity continues to grow, companies are still being breached, and sensitive personal, financial, and health information is still being compromised. As of March 2016, 47 states and the District of Columbia have adopted laws that require companies to notify individuals in the event that their personal information is lost or stolen. This report sets out the results of a study of consumer attitudes toward data breaches, notifications that a breach has occurred, and company responses to such events. The report should provide valuable information that can be used by businesses and policymakers as they develop policies and best practices related to information security and data breach response. Moreover, it should be of interest to individuals who conduct business with any organization that holds their personal and confidential data.

Descriptors:

Subject Categories:

• Computer Systems Management and Standards
• Psychology

Distribution Statement:

[A, Approved For Public Release]