The New Vulnerability: Data Security and Personal Information
Daniel J. Solove
George Washington University Law School
August 9, 2011
SECURING PRIVACY IN THE INTERNET AGE, Radin & Chander, eds., Stanford University Press, 2008
GWU Law School Public Law Research Paper No. 102
This book chapter was originally written for a conference on privacy and security at Stanford Law School held in March 2004. The chapter argues that abuses of personal information are caused by the failure to regulate the way companies manage personal information. Despite taking elaborate technological measures to protect their data systems, companies readily disseminate the personal information they have collected to a host of other entities and sometimes even to anyone willing to pay a small fee. Companies provide access to their record systems over the phone to anybody in possession of a few easy-to-find pieces of personal information such as Social Security numbers, birth dates, and mothers' maiden names. Reforming this problematic state of affairs requires a rethinking of the way the law comprehends the abuse of personal information. The law fails to focus on the causes of information abuses; instead, it becomes involved when information misuses such as identity theft actually occur, not earlier on in the process. If the law addressed information leaks and insecurity, it would more effectively curtail abuses.
Number of Pages in PDF File: 27
Keywords: privacy, security, identity theft, Social Security numbers, data
JEL Classification: K10, K13, K20
Date posted: August 30, 2004 ; Last revised: February 27, 2014
© 2015 Social Science Electronic Publishing, Inc. All Rights Reserved.
This page was processed by apollo6 in 0.312 seconds