{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,30]],"date-time":"2026-01-30T04:14:52Z","timestamp":1769746492268,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":103,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,9,16]],"date-time":"2024-09-16T00:00:00Z","timestamp":1726444800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Engineering and Physical Research Council"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,9,16]]},"DOI":"10.1145\/3703465.3703474","type":"proceedings-article","created":{"date-parts":[[2025,1,16]],"date-time":"2025-01-16T12:18:31Z","timestamp":1737029911000},"page":"106-125","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["\u201cWhen Data Breaches Happen, Where Does the Buck Stop?... and where should it stop?\u201d"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5367-6659","authenticated-orcid":false,"given":"Partha","family":"Das Chowdhury","sequence":"first","affiliation":[{"name":"University of Bristol, Bristol, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7187-6531","authenticated-orcid":false,"given":"Karen","family":"Renaud","sequence":"additional","affiliation":[{"name":"University of Strathclyde, Glasgow, Scotland, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0109-1341","authenticated-orcid":false,"given":"Awais","family":"Rashid","sequence":"additional","affiliation":[{"name":"University of Bristol, Bristol, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,1,16]]},"reference":[{"key":"e_1_3_3_2_2_2","unstructured":"Joseph Anderson. 2024. Exclusive: Revealed: The scale of pay-outs to victims for NHS Scotland data breaches. https:\/\/www.scotsman.com\/health\/revealed-the-scale-of-pay-outs-to-victims-for-nhs-scotland-data-breaches-4684335."},{"key":"e_1_3_3_2_3_2","doi-asserted-by":"publisher","DOI":"10.1145\/168588.168615"},{"key":"e_1_3_3_2_4_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2001.991552"},{"key":"e_1_3_3_2_5_2","doi-asserted-by":"publisher","DOI":"10.1002\/9781119644682"},{"key":"e_1_3_3_2_6_2","unstructured":"R.J. Anderson Eireann Leverett and Richard Clayton. 2018. Standardisation and Certification of the Internet of Things. https:\/\/www.repository.cam.ac.uk\/handle\/1810\/287966 10.17863\/CAM.35286."},{"key":"e_1_3_3_2_7_2","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-58618-0_67"},{"key":"e_1_3_3_2_8_2","unstructured":"Benjamin Avanzi Xingyun Tan Greg Taylor and Bernard Wong. 2023. Cyber Insurance Risk: Reporting Delays Third-Party Cyber Events and Changes in Reporting Propensity\u2013An Analysis Using Data Breaches Published by US State Attorneys General. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2310.04786."},{"key":"e_1_3_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICITSI50517.2020.9264966"},{"key":"e_1_3_3_2_10_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-35822-7_19"},{"key":"e_1_3_3_2_11_2","doi-asserted-by":"crossref","unstructured":"Vassiliki Bamiatzi Michael Dowling Fabian Gogolin Fearghal Kearney and Samuel Vigne. 2023. Are the good spared? Corporate social responsibility as insurance against cyber security incidents. Risk Analysis 43 12 (2023) 2503\u20132518. https:\/\/doi.org\/10.1111\/risa.14122.","DOI":"10.1111\/risa.14122"},{"key":"e_1_3_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-91716-0_19"},{"key":"e_1_3_3_2_13_2","unstructured":"Justin Bathon. 2013. How little data breaches cause big problems for schools. The Journal 40 10 (2013) 26\u201329."},{"key":"e_1_3_3_2_14_2","unstructured":"BBC. 2018. Uber fined \u00a3385 000 for losing UK customer data. https:\/\/www.bbc.com\/news\/technology-46357001."},{"key":"e_1_3_3_2_15_2","doi-asserted-by":"crossref","unstructured":"Omri Ben-Shahar. 2019. Data pollution. Journal of Legal Analysis 11 (2019) 104\u2013159. https:\/\/doi.org\/10.1093\/jla\/laz005.","DOI":"10.1093\/jla\/laz005"},{"key":"e_1_3_3_2_16_2","volume-title":"The collected works of Jeremy Bentham","author":"Bentham Jeremy","year":"1970","unstructured":"Jeremy Bentham. 1970. An Introduction to the Principles of Morals and Legislation (1789). In The collected works of Jeremy Bentham, J.\u00a0H. Burns and H.\u00a0L.\u00a0A. Hart (Eds.). Clarendon Press, New York."},{"key":"e_1_3_3_2_17_2","doi-asserted-by":"crossref","unstructured":"Joshua\u00a0M Bentley Kimberly\u00a0R Oostman and Sayyed Fawad\u00a0Ali Shah. 2018. We\u2019re sorry but it\u2019s not our fault: Organizational apologies in ambiguous crisis situations. Journal of Contingencies and Crisis Management 26 1 (2018) 138\u2013149. https:\/\/doi.org\/10.1111\/1468-5973.12169.","DOI":"10.1111\/1468-5973.12169"},{"key":"e_1_3_3_2_18_2","unstructured":"Heinz-Peter Berg. 2010. Risk management: procedures methods and experiences. Reliability: Theory & Applications 5 2 (17) (2010) 79\u201395."},{"key":"e_1_3_3_2_19_2","unstructured":"Donna Borak. 2017. Former Equifax CEO Richard Smith: \u2019I am deeply sorry\u2019. https:\/\/money.cnn.com\/2017\/10\/02\/news\/companies\/equifax-smith-cyber-breach-apology\/index.html."},{"key":"e_1_3_3_2_20_2","doi-asserted-by":"crossref","unstructured":"Virginia Braun and Victoria Clarke. 2006. Using thematic analysis in psychology. Qualitative Research in Psychology 3 2 (2006) 77\u2013101. https:\/\/doi.org\/10.1191\/1478088706qp063oa.","DOI":"10.1191\/1478088706qp063oa"},{"key":"e_1_3_3_2_21_2","doi-asserted-by":"crossref","unstructured":"Hart\u00a0S Brown. 2016. After the data breach: Managing the crisis and mitigating the impact. Journal of Business Continuity & Emergency Planning 9 4 (2016) 317\u2013328.","DOI":"10.69554\/VAYJ4809"},{"key":"e_1_3_3_2_22_2","unstructured":"Capital One. 2019. Information on the Capital One cyber incident. https:\/\/www.capitalone.com\/digital\/facts2019\/."},{"key":"e_1_3_3_2_23_2","doi-asserted-by":"crossref","unstructured":"Jessica\u00a0Rose Carre Shelby\u00a0R Curtis and Daniel\u00a0Nelson Jones. 2018. Ascribing responsibility for online security and data breaches. Managerial Auditing Journal 33 4 (2018) 436\u2013446. https:\/\/doi.org\/10.1108\/MAJ-11-2017-1693.","DOI":"10.1108\/MAJ-11-2017-1693"},{"key":"e_1_3_3_2_24_2","doi-asserted-by":"crossref","unstructured":"Hsiangting\u00a0Shatina Chen and Tun-Min Jai. 2021. Trust fall: data breach perceptions from loyalty and non-loyalty customers. The Service industries journal 41 13-14 (2021) 947\u2013963. https:\/\/doi.org\/10.1080\/02642069.2019.1603296.","DOI":"10.1080\/02642069.2019.1603296"},{"key":"e_1_3_3_2_25_2","unstructured":"CISA. 2012. Protecting Sensitive and Personal Information from Ransomware-Caused Data Breaches. https:\/\/www.cisa.gov\/sites\/default\/files\/publications\/CISA_Fact_Sheet-Protecting_Sensitive_and_Personal_Information_from_Ransomware-Caused_Data_Breaches-508C.pdf."},{"key":"e_1_3_3_2_26_2","unstructured":"Richard Console. 2018. Capital One Confirms Sensitive Customer Info Leaked Following NCB Management Services Inc. Data Breach. https:\/\/www.jdsupra.com\/legalnews\/capital-one-confirms-sensitive-customer-4713230\/."},{"key":"e_1_3_3_2_27_2","doi-asserted-by":"crossref","unstructured":"W\u00a0Timothy Coombs. 2007. Protecting organization reputations during a crisis: The development and application of situational crisis communication theory. Corporate Reputation Review 10 (2007) 163\u2013176. https:\/\/doi.org\/10.1057\/palgrave.crr.1550049.","DOI":"10.1057\/palgrave.crr.1550049"},{"key":"e_1_3_3_2_28_2","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423347"},{"key":"e_1_3_3_2_29_2","unstructured":"Cory Doctorow. 2024. Health data \u2013 it isn\u2019t just Palantir or bust. https:\/\/goodlawproject.org\/cory-doctorow-health-data-it-isnt-just-palantir-or-bust\/."},{"key":"e_1_3_3_2_30_2","doi-asserted-by":"crossref","unstructured":"Maurice Cranston. 1989. Jean-Jacques Rousseau and the fusion of democratic sovereignty with aristocratic government. History of European Ideas 11 1-6 (1989) 417\u2013425. https:\/\/doi.org\/10.1016\/0191-6599(89)90229-5.","DOI":"10.1016\/0191-6599(89)90229-5"},{"key":"e_1_3_3_2_31_2","unstructured":"Andres Crocker Cory Doctorow and Naomi Gilens. 2020. Facebook\u2019s Election-Week War on Accountability is Wrong Wrong Wrong. https:\/\/www.eff.org\/deeplinks\/2020\/10\/facebooks-election-week-war-accountability-wrong-wrong-wrong."},{"key":"e_1_3_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00019"},{"key":"e_1_3_3_2_33_2","unstructured":"Kristopher Dane. 2012. Considering Data Breaches: Public Information Corporate Responsibility and Market Valuations. Master\u2019s thesis. Interdisciplinary Arts and Sciences University of Washington."},{"key":"e_1_3_3_2_34_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-13654-2"},{"key":"e_1_3_3_2_35_2","first-page":"60","volume-title":"New Security Paradigms Workshop","author":"Chowdhury Partha Das","year":"2022","unstructured":"Partha Das Chowdhury, Andr\u00e9s\u00a0Dom\u00ednguez Hern\u00e1ndez, Marvin Ramokapane, and Awais Rashid. 2022. From Utility to Capability: A New Paradigm to Conceptualize and Develop Inclusive PETs. In New Security Paradigms Workshop. ACM, New Hampshire, USA, 60\u201374. https:\/\/doi.org\/10.1145\/3584318.3584323."},{"key":"e_1_3_3_2_36_2","doi-asserted-by":"publisher","DOI":"10.1145\/3633500.3633506"},{"key":"e_1_3_3_2_37_2","doi-asserted-by":"publisher","DOI":"10.1145\/3292006.3300027"},{"key":"e_1_3_3_2_38_2","unstructured":"Dooley Harte. 2023. Update on USS Capita Data Breach. https:\/\/www.ucu.org.uk\/article\/13020\/Update-on-USS-Capita-data-breach."},{"key":"e_1_3_3_2_39_2","unstructured":"Jean Dr\u00e8ze and Amartya Sen. 2012. Putting growth in its place. Yojana 56 (2012) 36\u201340."},{"key":"e_1_3_3_2_40_2","unstructured":"ENISA. 2023. ENISA THREAT LANDSCAPE 2023. https:\/\/www.enisa.europa.eu\/publications\/enisa-threat-landscape-2023."},{"key":"e_1_3_3_2_41_2","unstructured":"European Commission. undated. What is a data breach and what do we have to do in case of a data breach?https:\/\/commission.europa.eu\/law\/law-topic\/data-protection\/reform\/rules-business-and-organisations\/obligations\/what-data-breach-and-what-do-we-have-do-case-data-breach_en."},{"key":"e_1_3_3_2_42_2","unstructured":"Emily Flitter and Karen Weise. 2019. Capital One Data Breach Compromises Data of Over 100 Million. https:\/\/www.nytimes.com\/2019\/07\/29\/business\/capital-one-data-breach-hacked.html."},{"key":"e_1_3_3_2_43_2","volume-title":"Why your data breach is my problem","author":"Frei Stefan","year":"2014","unstructured":"Stefan Frei. 2014. Why your data breach is my problem. Technical Report. NSS Labs. https:\/\/www.researchgate.net\/publication\/268800330."},{"key":"e_1_3_3_2_44_2","doi-asserted-by":"crossref","unstructured":"M\u00a0da\u00a0C Freitas and Miguel Mira\u00a0da Silva. 2018. GDPR Compliance in SMEs: There is much to be done. Journal of Information Systems Engineering & Management 3 4 (2018) 30. https:\/\/doi.org\/10.20897\/jisem\/3941.","DOI":"10.20897\/jisem\/3941"},{"key":"e_1_3_3_2_45_2","unstructured":"Brian Fung. 2024. DOJ antitrust case targeting Google\u2019s ad-tech business will go to trial in September federal judge rules. https:\/\/edition.cnn.com\/2024\/02\/05\/tech\/doj-antitrust-case-google-ad-trial-september\/index.html."},{"key":"e_1_3_3_2_46_2","doi-asserted-by":"crossref","unstructured":"B Ganapathi\u00a0Subramaniam T Chithralekha and B Amudhambigai. 2023. What Ails Cyber Insurance? An Analysis of Barriers and Drivers Using Fuzzy TOPSIS Method. SN Computer Science 5 1 (2023) 20. https:\/\/doi.org\/10.1007\/s42979-023-02266-2.","DOI":"10.1007\/s42979-023-02266-2"},{"key":"e_1_3_3_2_47_2","doi-asserted-by":"publisher","DOI":"10.1093\/oso\/9780190072070.001.0001"},{"key":"e_1_3_3_2_48_2","unstructured":"Craig Hale. 2023. Employees are nearly always to blame for data breaches. https:\/\/www.techradar.com\/pro\/employees-are-nearly-always-to-blame-for-data-breaches."},{"key":"e_1_3_3_2_49_2","doi-asserted-by":"crossref","unstructured":"Tahereh Hasani Davar Rezania Nad\u00e8ge Levallet Norman O\u2019Reilly and Mohammad Mohammadi. 2023. Privacy enhancing technology adoption and its impact on SMEs\u2019 performance. International Journal of Engineering Business Management 15 (2023) 18479790231172874. https:\/\/doi.org\/10.1177\/18479790231172874.","DOI":"10.1177\/18479790231172874"},{"key":"e_1_3_3_2_50_2","volume-title":"Graphics Interface, 28-29 May","author":"Hassanzadeh Zahra","year":"2020","unstructured":"Zahra Hassanzadeh, Sky Marsen, and Robert Biddle. 2020. We\u2019re Here to Help: Company Image Repair and User Perception of Data Breaches. In Graphics Interface, 28-29 May. ACM, Ontario, Canada."},{"key":"e_1_3_3_2_51_2","unstructured":"Benjamin\u00a0Clay Hughes. 2020. Time for Change: How Google\u2019s Anticompetitive Conduct Reveals the Deficiencies of Modern Antitrust Regulation. Cardozo Int\u2019l & Comp. L. Rev. 4 (2020) 399."},{"key":"e_1_3_3_2_52_2","unstructured":"Connor Jones. 2023. Equifax scores \u00a311.1M slap on wrist over 2017 mega breach. https:\/\/www.theregister.com\/2023\/10\/13\/equifax_fca_fine\/?ref=upstract.com."},{"key":"e_1_3_3_2_53_2","volume-title":"Tenth Mediterranean Conference on Information Systems (MCIS)","author":"Karyda Maria","year":"2016","unstructured":"Maria Karyda and Lilian Mitrou. 2016. Data breach notification: issues and challenges for security management. In Tenth Mediterranean Conference on Information Systems (MCIS). AIS, Paphos, Cyprus."},{"key":"e_1_3_3_2_54_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICIoT48696.2020.9089466"},{"key":"e_1_3_3_2_55_2","first-page":"3","volume-title":"International Workshop on Data Privacy Management","author":"Kikuchi Hiroaki","year":"2021","unstructured":"Hiroaki Kikuchi, Michihiro Yamada, Kazuki Ikegami, and Koji Inui. 2021. Best Security Measures to Reduce Cyber-Incident and Data Breach Risks. In International Workshop on Data Privacy Management. Springer, Darmstadt, Germany, 3\u201319. https:\/\/doi.org\/10.1007\/978-3-030-93944-1_1."},{"key":"e_1_3_3_2_56_2","doi-asserted-by":"crossref","unstructured":"Bokyung Kim Kristine Johnson and Sun-Young Park. 2017. Lessons from the five data breaches: Analyzing framed crisis response strategies and crisis severity. Cogent Business & Management 4 1 (2017) 1354525. https:\/\/doi.org\/10.1080\/23311975.2017.1354525.","DOI":"10.1080\/23311975.2017.1354525"},{"key":"e_1_3_3_2_57_2","doi-asserted-by":"crossref","unstructured":"Claire Lending Kristina Minnick and Patrick\u00a0J Schorno. 2018. Corporate governance social responsibility and data breaches. Financial Review 53 2 (2018) 413\u2013455. https:\/\/doi.org\/10.1111\/fire.12160.","DOI":"10.1111\/fire.12160"},{"key":"e_1_3_3_2_58_2","volume-title":"The 22nd Annual Conference of the Association of Internet Researchers","author":"Liao Tony","year":"2021","unstructured":"Tony Liao and Haley Fite. 2021. \u2018It\u2019s My Fault For Posting In The First Place\u2019: How Individual Responsibility And Self-blame Are Sustained And Internalized. In The 22nd Annual Conference of the Association of Internet Researchers. AoIR, Online. https:\/\/doi.org\/10.5210\/spir.v2021i0.12200, 13-16 Oct."},{"key":"e_1_3_3_2_59_2","doi-asserted-by":"crossref","unstructured":"David Lieberman. 1999. Adam Smith on justice rights and law. http:\/\/dx.doi.org\/10.2139\/ssrn.215213.","DOI":"10.2139\/ssrn.215213"},{"key":"e_1_3_3_2_60_2","unstructured":"Marissa MacWhirter. 2023. Glasgow Arnold Clark customers at risk after major cyber attack. https:\/\/www.glasgowtimes.co.uk\/news\/scottish-news\/23321904.glasgow-arnold-clark-customers-risk-major-cyber-attack\/."},{"key":"e_1_3_3_2_61_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-27386-6_10"},{"key":"e_1_3_3_2_62_2","doi-asserted-by":"crossref","unstructured":"Kristin Masuch Maike Greve and Simon Trang. 2021. What to do after a data breach? Examining apology and compensation as response strategies for health service providers. Electronic Markets 31 4 (2021) 829\u2013848. https:\/\/doi.org\/10.1007\/s12525-021-00490-3.","DOI":"10.1007\/s12525-021-00490-3"},{"key":"e_1_3_3_2_63_2","doi-asserted-by":"crossref","unstructured":"M.R. McGuire and Karen Renaud. 2023. Harm injustice & technology: Reflections on the UK\u2019s subpostmasters\u2019 case. The Howard Journal of Crime and Justice 62 4 (2023) 441\u2013461. https:\/\/doi.org\/10.1111\/hojo.12533.","DOI":"10.1111\/hojo.12533"},{"key":"e_1_3_3_2_64_2","unstructured":"Miro. 2022. Miro | Online Whiteboard for Visual Collaboration. https:\/\/miro.com\/."},{"key":"e_1_3_3_2_65_2","doi-asserted-by":"crossref","unstructured":"Zareef Mohammed. 2022. Data breach recovery areas: an exploration of organization\u2019s recovery strategies for surviving data breaches. Organizational Cybersecurity Journal: Practice Process and People 2 1 (2022) 41\u201359. https:\/\/doi.org\/10.1108\/OCJ-05-2021-0014.","DOI":"10.1108\/OCJ-05-2021-0014"},{"key":"e_1_3_3_2_66_2","doi-asserted-by":"crossref","unstructured":"Tyler Moore Richard Clayton and Ross Anderson. 2009. The Economics of Online Crime. The Journal of Economic Perspectives 23 3 (2009) 3\u201320.","DOI":"10.1257\/jep.23.3.3"},{"key":"e_1_3_3_2_67_2","doi-asserted-by":"crossref","unstructured":"Gareth Mott Sarah Turner Jason\u00a0RC Nurse Jamie MacColl James Sullivan Anna Cartwright and Edward Cartwright. 2023. Between a rock and a hard (ening) place: Cyber insurance in the ransomware era. Computers & Security 128 (2023) 103162. https:\/\/doi.org\/10.1016\/j.cose.2023.103162.","DOI":"10.1016\/j.cose.2023.103162"},{"key":"e_1_3_3_2_68_2","doi-asserted-by":"crossref","unstructured":"Nelson\u00a0Novaes Neto Stuart Madnick Anchises Moraes G\u00a0De Paula and Natasha\u00a0Malara Borges. 2021. Developing a global data breach database and the challenges encountered. Journal of Data and Information Quality (JDIQ) 13 1 (2021) 1\u201333. https:\/\/doi.org\/10.1145\/3439873.","DOI":"10.1145\/3439873"},{"key":"e_1_3_3_2_69_2","unstructured":"Lily\u00a0Hay Newman. 2019. Everything We Know About the Capital One Hacking Case So Far. https:\/\/www.wired.com\/story\/capital-one-paige-thompson-case-hacking-spree\/."},{"key":"e_1_3_3_2_70_2","unstructured":"Alfred Ng. 2023. How the Equifax hack happened and what still needs to be done. https:\/\/www.cnet.com\/news\/privacy\/equifaxs-hack-one-year-later-a-look-back-at-how-it-happened-and-whats-changed\/."},{"key":"e_1_3_3_2_71_2","unstructured":"Lananh Nguyen. 2021. Capital One settles a class-action lawsuit for $190 million in a 2019 hacking. https:\/\/www.nytimes.com\/2021\/12\/23\/business\/capital-one-hacking-settlement.html."},{"key":"e_1_3_3_2_72_2","unstructured":"Charlie Osborne. 2019. This is the impact of a data breach on enterprise share prices. https:\/\/www.zdnet.com\/article\/this-is-how-a-data-breach-at-your-company-can-hit-share-prices\/."},{"key":"e_1_3_3_2_73_2","doi-asserted-by":"crossref","unstructured":"Kjartan Palsson Steinn Gudmundsson and Sachin Shetty. 2020. Analysis of the impact of cyber events for cyber insurance. The Geneva Papers on Risk and Insurance-Issues and Practice 45 (2020) 564\u2013579. https:\/\/doi.org\/10.1057\/s41288-020-00171-w.","DOI":"10.1057\/s41288-020-00171-w"},{"key":"e_1_3_3_2_74_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-27739-9_1624-1"},{"key":"e_1_3_3_2_75_2","unstructured":"Nicole Perlroth and Mike Isaac. 2018. Inside Uber\u2019s $100 000 Payment to a Hacker and the Fallout. https:\/\/www.nytimes.com\/2018\/01\/12\/technology\/uber-hacker-payment-100000.html."},{"key":"e_1_3_3_2_76_2","first-page":"402","volume-title":"ICCWS 2020 15th International Conference on Cyber Warfare and Security","volume":"402","author":"Poyraz Omer\u00a0Ilker","year":"2020","unstructured":"Omer\u00a0Ilker Poyraz, Sarah Bouazzaoui, Omer Keskin, Michael McShane, and C\u00a0Ariel Pinto. 2020. Cyber-assets at risk (CAR): The cost of personally identifiable information data breaches. In ICCWS 2020 15th International Conference on Cyber Warfare and Security , Vol.\u00a0402. Academic Conferences and publishing limited, Norfolk, USA, 402\u2013410."},{"key":"e_1_3_3_2_77_2","unstructured":"Principles of Responsible Investment. no date. Fiduciary Duty in the 21st Century: A Final Report. https:\/\/www.unpri.org\/download?ac=11972."},{"key":"e_1_3_3_2_78_2","unstructured":"PwC. 2022. Global Digital Trust Insights Survey. https:\/\/www.pwc.com\/gx\/en\/issues\/cybersecurity\/global-digital-trust-insights-2022.html."},{"key":"e_1_3_3_2_79_2","doi-asserted-by":"crossref","unstructured":"Jennifer Pybus and Mark Cot\u00e9. 2022. Did you give permission? Datafication in the mobile ecosystem. Information Communication & Society 25 11 (2022) 1650\u20131668. https:\/\/doi.org\/10.1080\/1369118X.2021.1877771.","DOI":"10.1080\/1369118X.2021.1877771"},{"key":"e_1_3_3_2_80_2","doi-asserted-by":"crossref","unstructured":"Jennifer Pybus and Mark Cote. 2024. Super SDKs: Tracking Personal Data and Platform Monopolies in the Mobile. Big Data & Society 11 1 (2024). https:\/\/doi.org\/10.1177\/20539517241231270.","DOI":"10.1177\/20539517241231270"},{"key":"e_1_3_3_2_81_2","doi-asserted-by":"crossref","unstructured":"Paul Ralph. 2021. ACM SIGSOFT empirical standards released. ACM SIGSOFT Software Engineering Notes 46 1 (2021) 19\u201319. https:\/\/doi.org\/10.1145\/3437479.3437483.","DOI":"10.1145\/3437479.3437483"},{"key":"e_1_3_3_2_82_2","doi-asserted-by":"crossref","unstructured":"James Rasalam and Raymond\u00a0J Elson. 2019. Cybersecurity And Management\u2019s Ethical Responsibilities: The Case Of Equifax And Uber. Global Journal of Business Pedagogy 3 2 (2019) 8\u201315.","DOI":"10.47177\/GJBP.03.03.2019.008"},{"key":"e_1_3_3_2_83_2","doi-asserted-by":"crossref","unstructured":"Karen Renaud Stephen Flowerday Merrill Warkentin Paul Cockshott and Craig Orgeron. 2018. Is the responsibilization of the cyber security risk reasonable and judicious? Computers & Security 78 (2018) 198\u2013211. https:\/\/doi.org\/10.1016\/j.cose.2018.06.006.","DOI":"10.1016\/j.cose.2018.06.006"},{"key":"e_1_3_3_2_84_2","volume-title":"From ChatGPT to HackGPT: Meeting the cybersecurity threat of generative AI","author":"Renaud Karen","year":"2023","unstructured":"Karen Renaud, Merrill Warkentin, and George Westerman. 2023. From ChatGPT to HackGPT: Meeting the cybersecurity threat of generative AI. MIT Sloan Management Review. 64428 pages."},{"key":"e_1_3_3_2_85_2","doi-asserted-by":"crossref","unstructured":"Sasha Romanosky Lillian Ablon Andreas Kuehn and Therese Jones. 2019. Content analysis of cyber insurance policies: how do carriers price cyber risk? Journal of Cybersecurity 5 1 (2019) tyz002. https:\/\/doi.org\/10.1093\/cybsec\/tyz002.","DOI":"10.1093\/cybsec\/tyz002"},{"key":"e_1_3_3_2_86_2","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2020-0067"},{"key":"e_1_3_3_2_87_2","unstructured":"Bruce Schneier. 2012. Feudal Security. https:\/\/www.schneier.com\/blog\/archives\/2012\/12\/feudal_sec.html."},{"key":"e_1_3_3_2_88_2","doi-asserted-by":"publisher","DOI":"10.2307\/j.ctvjnrv7n"},{"key":"e_1_3_3_2_89_2","volume-title":"McMurrin S Tanner Lectures on Human Values","author":"Sen Amartya\u00a0K.","year":"1979","unstructured":"Amartya\u00a0K. Sen. 1979. Equality of What? In McMurrin S Tanner Lectures on Human Values. Vol.\u00a01. Cambridge: Cambridge University Press, 1987, Cambridge, UK. Reprinted in John Rawls and Charles Fried and Amartya Sen and Thomas C Schelling. Sterling M. McMurrin (Ed), Liberty, Equality and Law."},{"key":"e_1_3_3_2_90_2","doi-asserted-by":"publisher","DOI":"10.1145\/3267357.3267368"},{"key":"e_1_3_3_2_91_2","unstructured":"Sky News. 2017. Uber boss Dara Khosrowshahi apologises to London for \u2019mistakes we\u2019ve made\u2019. https:\/\/news.sky.com\/story\/uber-boss-dara-khosrowshahi-apologises-and-asks-customers-to-work-with-us-11052842."},{"key":"e_1_3_3_2_92_2","volume-title":"Murky consent: an approach to the fictions of consent in privacy law","author":"Solove Daniel\u00a0J","year":"2023","unstructured":"Daniel\u00a0J Solove. 2023. Murky consent: an approach to the fictions of consent in privacy law. Technical Report Paper No. 2023-23. GWU Legal Studies Research Paper No. 2023-23."},{"key":"e_1_3_3_2_93_2","volume-title":"Toward a Positive Theory of Privacy Law","author":"Strahilevitz Lior\u00a0Jacob","year":"2013","unstructured":"Lior\u00a0Jacob Strahilevitz. 2013. Toward a Positive Theory of Privacy Law. Technical Report. COASE-SANDOR Institute for Law and Economics Working Paper No. 637 Public Law and Legal Theory Working Paper NO. 421, University of Chicago."},{"key":"e_1_3_3_2_94_2","unstructured":"Steve Symanovich. 2021. Uber Data Breach Affects 57 Million Rider and Driver Accounts. https:\/\/lifelock.norton.com\/learn\/data-breaches\/uber-data-breach-affects-57-million-rider-and-driver-accounts."},{"key":"e_1_3_3_2_95_2","doi-asserted-by":"publisher","DOI":"10.1145\/3549015.3555669"},{"key":"e_1_3_3_2_96_2","doi-asserted-by":"crossref","unstructured":"Shauhin\u00a0A Talesh. 2018. Data breach privacy and cyber insurance: How insurance companies act as \u201ccompliance managers\u201d for businesses. Law & Social Inquiry 43 2 (2018) 417\u2013440.","DOI":"10.1111\/lsi.12303"},{"key":"e_1_3_3_2_97_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-11458-9_13"},{"key":"e_1_3_3_2_98_2","unstructured":"Jason\u00a0E. Thomas. 2019. A Case Study Analysis of the Equifax Data Breach 1 A Case Study Analysis of the Equifax Data Breach. https:\/\/doi.org\/10.13140\/RG.2.2.16468.76161."},{"key":"e_1_3_3_2_99_2","volume-title":"Hobbes: Leviathan","author":"Tuck Richard","year":"1991","unstructured":"Richard Tuck (Ed.). 1991. Hobbes: Leviathan. Cambridge: Cambridge University Press. https:\/\/doi.org\/10.1017\/CBO9780511808166."},{"key":"e_1_3_3_2_100_2","unstructured":"European Union. 2018. General Data Protection Regulations. https:\/\/gdpr-info.eu"},{"key":"e_1_3_3_2_101_2","unstructured":"Alexis Ward. 2022. The oldest trick in the Facebook: Would the general data protection regulation have stopped the Cambridge analytica scandal? Trinity CL Rev. 25 (2022) 221."},{"key":"e_1_3_3_2_102_2","doi-asserted-by":"crossref","unstructured":"Spencer Wheatley Annette Hofmann and Didier Sornette. 2021. Addressing insurance of data breach cyber risks in the catastrophe framework. The Geneva Papers on Risk and Insurance-Issues and Practice 46 (2021) 53\u201378.","DOI":"10.1057\/s41288-020-00163-w"},{"key":"e_1_3_3_2_103_2","unstructured":"Julia\u00a0Carrie Wong. 2017. Uber concealed massive hack that exposed data of 57m users and drivers. https:\/\/www.theguardian.com\/technology\/2017\/nov\/21\/uber-data-hack-cyber-attack."},{"key":"e_1_3_3_2_104_2","unstructured":"Zacks Equity Research. 2020. Capital One to Pay $80M Penalty Over Data Breach Incident. https:\/\/www.nasdaq.com\/articles\/capital-one-to-pay-%2480m-penalty-over-data-breach-incident-2020-08-07."}],"event":{"name":"NSPW '24: New Security Paradigms Workshop","location":"Bedford PA USA","acronym":"NSPW '24"},"container-title":["Proceedings of the New Security Paradigms Workshop"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3703465.3703474","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3703465.3703474","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T01:18:08Z","timestamp":1750295888000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3703465.3703474"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,9,16]]},"references-count":103,"alternative-id":["10.1145\/3703465.3703474","10.1145\/3703465"],"URL":"https:\/\/doi.org\/10.1145\/3703465.3703474","relation":{},"subject":[],"published":{"date-parts":[[2024,9,16]]},"assertion":[{"value":"2025-01-16","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}