Beyond Mandatory: Making Data Breach Notifications Useful for Consumers

Data breaches pose significant security and privacy risks to affected consumers. However, it is doubtful whether data breach notifications mandated by respective laws effectively inform consumers of risks stemming from a data breach and motivate them to take protective actions.^5,8,12 We analyze potential reasons for consumers' inaction after a data breach and discuss how data breach notifications and respective requirements should be improved.