Information Privacy and Data Security

Cardozo Law Review de Novo, 2015

12 Pages Posted: 30 Apr 2015 Last revised: 24 Oct 2015

Lauren Henry Scholz

Harvard Law School; Yale University - Information Society Project

Date Written: June 3, 2015

Abstract

Legal academic and policy discourse generally presumes that information privacy and data security are interchangeable goals. The conventional wisdom is that data security is a handmaiden of information privacy, and so what serves data security will serve information privacy. However, this view is an oversimplification of the relationship between the two fields. This Essay aids law and policy development in both fields by correctly defining their relationship to one another. Data security has separate objectives from information privacy that can be agnostic or even in opposition to information privacy. The law should acknowledge information privacy and data security as separate institutional objectives to prevent undesirable — or at least unpredictable — results in edge cases in which data security’s objectives run counter to those of information privacy.

Keywords: cybersecurity, data security, data breach, security breach, breach notification, privacy, regulation, consumer protection, chief privacy officers, Federal Trade Commission, data protection, new governance, organizational fields, professionalization

Suggested Citation

Scholz, Lauren Henry, Information Privacy and Data Security (June 3, 2015). Cardozo Law Review de Novo, 2015. Available at SSRN: https://ssrn.com/abstract=2600495

Lauren Henry Scholz (Contact Author)

Harvard Law School ( email )

1575 Massachusetts
Hauser 406
Cambridge, MA 02138
United States

Yale University - Information Society Project ( email )

P.O. Box 208215
New Haven, CT 06520-8215
United States

Paper statistics

Downloads
184
Rank
133,794
Abstract Views
1,218