How Ethics Can Enhance Organizational Privacy: Lessons from the Choicepoint and TJX Data Breaches

Culnan, Mary J.; Williams, Cynthia

doi:10.2307/20650322

Cited by 252 publications

(206 citation statements)

References 31 publications

Supporting

Mentioning

189

Contrasting

Unclassified

Order By: Relevance

“…Fair information principles (FIP), and in particular notice and choice, serve as one source of guidance for self-regulation within the industry (Culnan and Williams 2009;Bowie and Jamal 2006;Milne and Culnan 2002), and could be adapted to the mobile sector (Federal Trade Commission 2012). However, practical and philosophical problems persist.…”

Section: Literature Reviewmentioning

confidence: 99%

Putting mobile application privacy in context: An empirical study of user privacy expectations for mobile devices

Martin

Shilton

2016

The Information Society

View full text Add to dashboard Cite

Section: Literature Reviewmentioning

confidence: 99%

Putting mobile application privacy in context: An empirical study of user privacy expectations for mobile devices

Martin

Shilton

2016

The Information Society

View full text Add to dashboard Cite

“…However, as we show here, the implications of this adoption are far from trivial in terms of the privacy, control, and the (in)dependence of individuals (i.e., in relation to RQ6 to RQ11). This contradiction reflects a classic example of an ethical dilemma (i.e., states in which multiple choices are available but all options entail the compromise of some ethical principle) (Culnan & Williams, 2009;Martinsons & Ma, 2009). In this case, the stance that insurance providers have a right (and, indeed, a fiduciary responsibility) to gather data that enables them to more accurately price the risks associated with individual policyholders conflicts with the position that individuals have a right to privacy and control over their own behavior.…”

Section: Balancing the Rights Of Individuals And Organizationsmentioning

confidence: 99%

The Light and Dark Side of The Black Box: Sensor-Based Technology in the Automotive Industry

Marabelli¹,

Hansen²,

Newell³

et al. 2017

CAIS

View full text Add to dashboard Cite

Abstract:Diverse aspects of our everyday lives increasingly feature sensor-based technologies. Despite the importance of understanding how business and consumers exploit and adopt these technologies, the information systems (IS) community has thus far devoted relatively little attention to the topic. Accordingly, in this paper, we foster an exploration of the issue among IS scholars by focusing on the emergent use of sensor-based technologies in the automotive insurance industry. Insurance providers have increasingly begun to turn to such technologies to gain competitive advantage around risk assessment and behavior-based pricing. To investigate this phenomenon, we consider the experiences of two organizations operating distinct national contexts: Progressive Insurance (US) and Generali (Italy). These two insurance providers have been first movers in adopting sensor-based technologies for risk assessment and policy pricing. First, we highlight the key similarities and differences between the cases with regard to the technologies adopted, business models pursued, and anticipated benefits and pitfalls for the companies and their consumers. Second, in a more holistic way, we discuss the implications and unintended consequences of sensorbased technologies in the automotive insurance industry. We formulate several research questions that provide opportunities and encourage more research in this emerging area of study.

show abstract

“…Much of the work on this issue has taken a descriptive approach and focused on principles for standard governance [7,18,24,27,31]. Miller and Tucker [23], a paper focusing on the first step for the regulation's role, show that adoption of encryption software increases the incidence of publicized data losses because of carelessness about other protection activities.…”

Section: Literature Reviewmentioning

confidence: 99%

Security Standardization for Social Welfare in the Presence of Unverifiable Control

Lee¹

2017

The Journal of Society for e-Business Studies

View full text Add to dashboard Cite

Standard makers in both private and public sectors have been increasingly mandating security standards upon organizations to protect organizational digital assets. A major issue in security standardization is that standards often cannot regulate all possible security efforts by the standard maker because some efforts are unverifiable by nature. This paper studies from an analytical perspective how a standard maker should design the standard using a verifiable security control in the presence of another related unverifiable one. We compare it with two benchmark standards; naïve-standard which refers to the standard maker who ignores the existence of the unverifiable control, and complete-information standard which refers to the maker sets standards on both controls. Optimal standard and benchmark standard depend critically on how the two controls are configured. Under parallel configuration, the existence of the unverifiable control induces the policy maker to set a higher standard (the complete-information standard is optimal); under serial configuration, a lower standard is applied (neither benchmark works). Under best-shot configuration and if the verifiable control is more cost-efficient, the existence of the unverifiable control has no impact on the optimal standard (the naïve standard is optimal).

show abstract

How Ethics Can Enhance Organizational Privacy: Lessons from the Choicepoint and TJX Data Breaches

Cited by 252 publications

References 31 publications

Putting mobile application privacy in context: An empirical study of user privacy expectations for mobile devices

Putting mobile application privacy in context: An empirical study of user privacy expectations for mobile devices

The Light and Dark Side of The Black Box: Sensor-Based Technology in the Automotive Industry

Security Standardization for Social Welfare in the Presence of Unverifiable Control

Contact Info

Product

Resources

About