{"id":"https://openalex.org/W2935596392","doi":"https://doi.org/10.1016/j.irle.2019.03.007","title":"Why information security law has been ineffective in addressing security vulnerabilities: Evidence from California data breach notifications and relevant court and government records","display_name":"Why information security law has been ineffective in addressing security vulnerabilities: Evidence from California data breach notifications and relevant court and government records","publication_year":2019,"publication_date":"2019-04-03","ids":{"openalex":"https://openalex.org/W2935596392","doi":"https://doi.org/10.1016/j.irle.2019.03.007","mag":"2935596392"},"language":"en","primary_location":{"id":"doi:10.1016/j.irle.2019.03.007","doi":"https://doi.org/10.1016/j.irle.2019.03.007","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.irle.2019.03.007","pdf_url":"https://www.sciencedirect.com/science/article/pii/S0144818818302011/pdf","source":{"id":"https://openalex.org/S121409115","display_name":"International Review of Law and Economics","issn_l":"0144-8188","issn":["0144-8188","1873-6394"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-b","anvur-class-a","anvur-scientific","cwts-core","jufo-3","norway-2","poland-70","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Review of Law and Economics","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://www.sciencedirect.com/science/article/pii/S0144818818302011/pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012293398","display_name":"Sangchul Park","orcid":"https://orcid.org/0000-0003-4231-2881","observed_orcids":["https://orcid.org/0000-0003-4231-2881"]},"institutions":[{"id":"https://openalex.org/I40347166","display_name":"University of Chicago","ror":"https://ror.org/024mw5h28","country_code":"US","type":"education","lineage":["https://openalex.org/I40347166"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Sangchul Park","raw_affiliation_strings":["University of Chicago Law School, 1111 E 60th St., Chicago IL, 60637, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Chicago Law School, 1111 E 60th St., Chicago IL, 60637, USA","institution_ids":["https://openalex.org/I40347166"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5012293398"],"corresponding_institution_ids":["https://openalex.org/I40347166"],"apc_list":{"value":1800,"currency":"USD","value_usd":1800},"apc_paid":{"value":1800,"currency":"USD","value_usd":1800},"fwci":23.9997,"has_fulltext":true,"cited_by_count":22,"citation_normalized_percentile":{"value":0.99185079,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":98},"biblio":{"volume":"58","issue":null,"first_page":"132","last_page":"145"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13364","display_name":"Digitalization, Law, and Regulation","score":0.9121000170707703,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T13364","display_name":"Digitalization, Law, and Regulation","score":0.9121000170707703,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.02850000001490116,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.024900000542402267,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-security-law","display_name":"information security legislation","score":0.9750000238418579},{"id":"https://openalex.org/keywords/data-breach-notification","display_name":"data breach notification","score":0.7789999842643738},{"id":"https://openalex.org/keywords/principal-agent-problem","display_name":"principal-agent problem","score":0.8080000281333923},{"id":"https://openalex.org/keywords/negative-externalities","display_name":"negative externalities","score":0.9629999995231628},{"id":"https://openalex.org/keywords/article-iii-standing","display_name":"Article III standing","score":0.7459999918937683},{"id":"https://openalex.org/keywords/private-enforcement","display_name":"private enforcement","score":0.8209999799728394},{"id":"https://openalex.org/keywords/public-enforcement","display_name":"public enforcement","score":0.890999972820282},{"id":"https://openalex.org/keywords/data-aggregators","display_name":"data aggregators","score":0.9419999718666077},{"id":"https://openalex.org/keywords/security-vulnerabilities","display_name":"security vulnerabilities","score":0.5139999985694885},{"id":"https://openalex.org/keywords/personal-data-protection","display_name":"personal data protection","score":0.6100000143051147},{"id":"https://openalex.org/keywords/government-regulation","display_name":"government regulation","score":0.5649999976158142}],"concepts":[{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.7635555267333984},{"id":"https://openalex.org/C97460637","wikidata":"https://www.wikidata.org/wiki/Q468489","display_name":"Plaintiff","level":2,"score":0.609481930732727},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5751494765281677},{"id":"https://openalex.org/C2780262971","wikidata":"https://www.wikidata.org/wiki/Q44554","display_name":"Law enforcement","level":2,"score":0.5520013570785522},{"id":"https://openalex.org/C108170787","wikidata":"https://www.wikidata.org/wiki/Q3951828","display_name":"Agency (philosophy)","level":2,"score":0.5364475846290588},{"id":"https://openalex.org/C16118543","wikidata":"https://www.wikidata.org/wiki/Q275372","display_name":"Externality","level":2,"score":0.526664674282074},{"id":"https://openalex.org/C21021354","wikidata":"https://www.wikidata.org/wiki/Q1207171","display_name":"Payment card","level":3,"score":0.506574273109436},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.498913049697876},{"id":"https://openalex.org/C2778137410","wikidata":"https://www.wikidata.org/wiki/Q2732820","display_name":"Government (linguistics)","level":2,"score":0.4717850387096405},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.4499078392982483},{"id":"https://openalex.org/C29122968","wikidata":"https://www.wikidata.org/wiki/Q1414816","display_name":"Incentive","level":2,"score":0.44760483503341675},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.416881263256073},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.339314341545105},{"id":"https://openalex.org/C190253527","wikidata":"https://www.wikidata.org/wiki/Q295354","display_name":"Law and economics","level":1,"score":0.32013535499572754},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.3066166639328003},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.27484697103500366},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.2082270383834839},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.12647384405136108},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.08814036846160889},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1016/j.irle.2019.03.007","doi":"https://doi.org/10.1016/j.irle.2019.03.007","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.irle.2019.03.007","pdf_url":"https://www.sciencedirect.com/science/article/pii/S0144818818302011/pdf","source":{"id":"https://openalex.org/S121409115","display_name":"International Review of Law and Economics","issn_l":"0144-8188","issn":["0144-8188","1873-6394"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-b","anvur-class-a","anvur-scientific","cwts-core","jufo-3","norway-2","poland-70","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Review of Law and Economics","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:eee:irlaec:v:58:y:2019:i:c:p:132-145","doi":null,"is_oa":false,"landing_page_url":"http://www.sciencedirect.com/science/article/pii/S0144818818302011","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"doi:10.1016/j.irle.2019.03.007","doi":"https://doi.org/10.1016/j.irle.2019.03.007","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.irle.2019.03.007","pdf_url":"https://www.sciencedirect.com/science/article/pii/S0144818818302011/pdf","source":{"id":"https://openalex.org/S121409115","display_name":"International Review of Law and Economics","issn_l":"0144-8188","issn":["0144-8188","1873-6394"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-b","anvur-class-a","anvur-scientific","cwts-core","jufo-3","norway-2","poland-70","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Review of Law and Economics","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, justice, and strong institutions","score":0.9595999717712402,"id":"https://metadata.un.org/sdg/16"}],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2935596392.pdf","grobid_xml":"https://content.openalex.org/works/W2935596392.grobid-xml"},"referenced_works_count":49,"referenced_works":["https://openalex.org/W66318262","https://openalex.org/W77047371","https://openalex.org/W378733669","https://openalex.org/W748515386","https://openalex.org/W1480389472","https://openalex.org/W1482659704","https://openalex.org/W1496018843","https://openalex.org/W1498728415","https://openalex.org/W1501321335","https://openalex.org/W1536985861","https://openalex.org/W1566168400","https://openalex.org/W1607309762","https://openalex.org/W1967317786","https://openalex.org/W1970809283","https://openalex.org/W1971057943","https://openalex.org/W1971529029","https://openalex.org/W1983289401","https://openalex.org/W2003018692","https://openalex.org/W2010902645","https://openalex.org/W2026207628","https://openalex.org/W2028553240","https://openalex.org/W2062493711","https://openalex.org/W2066652718","https://openalex.org/W2069396279","https://openalex.org/W2081526168","https://openalex.org/W2101134179","https://openalex.org/W2113283831","https://openalex.org/W2119587968","https://openalex.org/W2124510216","https://openalex.org/W2138958508","https://openalex.org/W2169155539","https://openalex.org/W2274515672","https://openalex.org/W2316695912","https://openalex.org/W2506444507","https://openalex.org/W2744348685","https://openalex.org/W2959891070","https://openalex.org/W3039442798","https://openalex.org/W3048209079","https://openalex.org/W3048286298","https://openalex.org/W3123745084","https://openalex.org/W3123999207","https://openalex.org/W3124463999","https://openalex.org/W3124785118","https://openalex.org/W3125274913","https://openalex.org/W3202681484","https://openalex.org/W4234198536","https://openalex.org/W6629060530","https://openalex.org/W6636244607","https://openalex.org/W6831356612"],"related_works":["https://openalex.org/W4393030790","https://openalex.org/W2493933752","https://openalex.org/W55940880","https://openalex.org/W4400803201","https://openalex.org/W7064781287","https://openalex.org/W4319864787","https://openalex.org/W4286665165","https://openalex.org/W7064803539","https://openalex.org/W3187385209","https://openalex.org/W1941309327"],"abstract_inverted_index":{"Why":[0,21],"has":[1,87],"the":[2,37,52,78,99,102,112,121,125,142,150,165],"information":[3,53],"security":[4,54,64,108,143,152,206],"law":[5,29],"been":[6,184],"unsuccessful":[7],"in":[8,11,51,63,129,149,157,164,210],"having":[9],"firms":[10,148],"possession":[12],"of":[13,92,101,114,179,205],"personal":[14],"data":[15,19,23,75,159,167],"take":[16],"precautions":[17],"against":[18],"breaches?":[20],"are":[22],"breaches":[24],"becoming":[25],"more":[26],"devastating":[27],"notwithstanding":[28],"enforcement?":[30],"This":[31],"article":[32,200],"seeks":[33],"an":[34,68,106,202],"answer":[35],"from":[36,191],"legal":[38],"system\u2019s":[39],"failure":[40],"to":[41,61,71,82,96,117,124,139,173],"draw":[42],"a":[43,57,187],"line":[44],"between":[45],"agency":[46,69,193,219],"problems":[47],"and":[48,94,154,214,217],"externalities":[49,116],"inherent":[50],"market.":[55],"Although":[56],"firm\u2019s":[58],"misaligned":[59],"incentive":[60],"invest":[62],"measures":[65,144],"is":[66],"basically":[67],"problem":[70],"be":[72,118,174],"addressed":[73,119],"by":[74,120,146],"breach":[76,207],"litigation,":[77],"U.S.":[79],"courts\u2019":[80],"reluctance":[81],"grant":[83],"Article":[84],"III":[85],"standing":[86],"reduced":[88],"potential":[89],"plaintiffs\u2019":[90],"chance":[91],"winning":[93],"propensity":[95],"litigate,":[97],"impairing":[98],"functionality":[100],"private":[103],"enforcement.":[104],"As":[105],"exception,":[107],"vulnerabilities":[109],"can":[110],"have":[111,182],"nature":[113],"negative":[115,180],"public":[122,162],"enforcement,":[123],"extent":[126],"that":[127,155],"those":[128,156],"\u201ckey":[130],"holders\u201d":[131],"such":[132,177],"as":[133],"payment":[134],"card":[135],"processors":[136],"enable":[137],"intruders":[138],"easily":[140],"circumvent":[141],"taken":[145],"other":[147],"same":[151],"chain,":[153],"massive":[158],"aggregators":[160],"undermine":[161],"trust":[163],"whole":[166],"infrastructure.":[168],"Government":[169],"regulations,":[170],"which":[171],"need":[172],"targeted":[175],"at":[176,186],"sources":[178],"externalities,":[181],"actually":[183],"misaimed":[185],"few":[188],"cases":[189],"arising":[190],"conventional":[192],"problems.":[194],"To":[195],"test":[196],"these":[197],"hypotheses,":[198],"this":[199],"presents":[201],"empirical":[203],"study":[204],"notifications":[208],"filed":[209],"California":[211],"during":[212],"2012\u20132016":[213],"relevant":[215],"court":[216],"government":[218],"records":[220],"produced":[221],"until":[222],"2018.":[223]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":3}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2019-04-11T00:00:00"}