Encryption and the Loss of Patient Data

Fast-paced IT advances have made it increasingly possible and useful for firms to collect data on their customers on an unprecedented scale. One downside of this is that firms can experience negative publicity and financial damage if their data are breached. This is particularly the case in the medi...

Full description

Bibliographic Details
Main Authors: Tucker, Catherine Elizabeth (Contributor), Miller, Amalia R. (Author)
Other Authors: Sloan School of Management (Contributor)
Format: Article
Language:English
Published: Wiley Blackwell, 2013-01-07T19:25:09Z.
Subjects:
Online Access:Get fulltext
Description
Summary:Fast-paced IT advances have made it increasingly possible and useful for firms to collect data on their customers on an unprecedented scale. One downside of this is that firms can experience negative publicity and financial damage if their data are breached. This is particularly the case in the medical sector, where we find empirical evidence that increased digitization of patient data is associated with more data breaches. The encryption of customer data is often presented as a potential solution, because encryption acts as a disincentive for potential malicious hackers, and can minimize the risk of breached data being put to malicious use. However, encryption both requires careful data management policies to be successful and does not ward off the insider threat. Indeed, we find no empirical evidence of a decrease in publicized instances of data loss associated with the use of encryption. Instead, there are actually increases in the cases of publicized data loss due to internal fraud or loss of computer equipment.
National Science Foundation (U.S.) (Grant 1053398)