Thank you for sharing!

Your article was successfully shared with the contacts you provided.
Devin Chwastyk, with McNees Wallace & Nurick. Devin Chwastyk, with McNees Wallace & Nurick.

All 50 U.S. states have data breach notification laws; the first was enacted 18 years ago in California. Pennsylvania’s Breach of Personal Information Notification Act is more than 15 years old. And, ever since, data breach notices have been headlining newspapers (and appearing in recipients’ mailboxes). A business leader would be hard-pressed to ignore that all U.S. states and most international jurisdictions have laws that trigger notification obligations in the wake of data security incidents.

A dirty secret, nonetheless, is that many organizations indifferently fail or deliberately avoid notifying customers of a breach of personally identifiable information. A 2017 paper studying the economics of information security concluded that more than 60% of U.S. data breaches go unreported. The cleverly titled study, “Estimating the Size of the Iceberg from Its Tip: An investigation into unreported data breach notifications” by Fabio Bisogni, et al.) clearly explains several reasons for such nonreporting:

This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.

To view this content, please continue to their sites.

Not a Lexis Advance® Subscriber?
Subscribe Now

Not a Bloomberg Law Subscriber?
Subscribe Now

Why am I seeing this?

LexisNexis® and Bloomberg Law are third party online distributors of the broad collection of current and archived versions of ALM's legal news publications. LexisNexis® and Bloomberg Law customers are able to access and use ALM's content, including content from the National Law Journal, The American Lawyer, Legaltech News, The New York Law Journal, and Corporate Counsel, as well as other sources of legal information.

For questions call 1-877-256-2472 or contact us at [email protected]

Law Firms Mentioned

Reprints & Licensing
Mentioned in a Law.com story?

License our industry-leading legal content to extend your thought leadership and build your brand.

General Counsel Conference Midwest: SuperConference 2021Event

GCC Midwest addresses today's legal issues facing companies by providing general counsel with insight and best practices.

Get More Information

General Counsel Summit (GCS) 2021Event

General Counsel Summit is the premier event for in-house counsel, hosting esteemed legal minds from all sectors of the economy.

Get More Information

ALM Legal Publication Newsletters

Sign Up Today and Never Miss Another Story.

As part of your digital membership, you can sign up for an unlimited number of a wide range of complimentary newsletters. Visit your My Account page to make your selections. Get the timely legal news and critical analysis you cannot afford to miss. Tailored just for you. In your inbox. Every day.

Copyright © 2021 ALM Media Properties, LLC. All Rights Reserved.