Growing complexity of modern information processing systems in many service-oriented industries has resulted in increasing exposure of private information. This has lead to heightened security concerns related to identity theft: an employee has access to too much personally identifiable...

Widespread abuse of internet users’ privacy online has prompted user advocacy groups to implore governments to intervene and protect consumer rights. To study such interventions’ effects, we examine data-protection policies that policy makers and governments can enforce on websites,...