Cash Substitution and Deferred Consumption as Data Breach Harms.

58 Pages Posted: 17 Aug 2022 Last revised: 22 Sep 2022

See all articles by Lior Strahilevitz

Lior Strahilevitz

University of Chicago Law School

Lisa Yao Liu

Columbia Business School

Date Written: August 3, 2022


In a series of federal court cases, judges have debated whether data breaches that expose consumer information satisfy Article III of the United States Constitution’s requirement that plaintiffs suffer an “injury in fact.” Judicial opinions find no constitutional standing in a narrow majority of such cases, and plaintiffs are likely to lose absent causal links to subsequent identity theft or the disclosure of embarrassing information. Consumers whose data are breached thus are left without a federal remedy, and firms’ incentives to invest in data security are diminished. Our paper identifies a novel injury that results from data breaches. Upon learning about local data breaches, consumers immediately reduce their purchases and shift from credit card purchases to cash transactions. These effects are more pronounced with respect to purchases that are characterized by greater elasticity of demand. The changes we identify are short-lived, though. After a data breach, many consumers forego both the benefits of a short-term loan from their credit card issuer, cash-back benefits, and other perks associated with card purchases. They also forego purchases they otherwise would have made. In light of our empirical results, the standing barrier that has thwarted so many data breach suits may be easily surmounted.

Keywords: Data security, data breach, breach notification, standing, injury in fact, privacy, constitutional law, class action, empirical, credit card, cash, accounting

Suggested Citation

Strahilevitz, Lior and Liu, Lisa Yao, Cash Substitution and Deferred Consumption as Data Breach Harms. (August 3, 2022). University of Chicago Coase-Sandor Institute for Law & Economics Research Paper No. 963, U of Chicago, Public Law Working Paper No. 809, Available at SSRN:

Lior Strahilevitz (Contact Author)

University of Chicago Law School ( email )

1111 E. 60th St.
Chicago, IL 60637
United States
773-834-8665 (Phone)
773-702-0730 (Fax)

Lisa Yao Liu

Columbia Business School ( email )

3022 Broadway
New York, NY 10027
United States

Do you have a job opening that you would like to promote on SSRN?

Paper statistics

Abstract Views
PlumX Metrics