tag:blogger.com,1999:blog-1913143473082500114.post1115951086185003915..comments2008-06-19T10:54:11.621-07:00William Morrisshttp://www.blogger.com/profile/09679044599000737422noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-1913143473082500114.post-17187240852897259002008-06-19T10:54:00.000-07:002008-06-19T10:54:00.000-07:00One of the things about fighting the privacy war is the mix of opinions on the subject. Some are right, some are wrong, and some are just confused. My blog, The Dunning Letter, is a combination of facts and opinions, with the latter based on my experience with the handling—or rather, mishandling—of consumer names and personal data. I am very passionate about the protection of individual privacy, and am convinced that business, government, and the public sector in general are not doing enough to secure our private information. <BR/><BR/>The TechWorld ad was correct in its “screaming” headline proclaiming that the Mellon researchers said notification laws aren’t lowering ID theft. Romanosky found no evidence that these laws reduce ID theft, but qualified this with the fact that he lacked “sufficient high quality data.” Data is sparse in this issue, but the Mellon researchers were working with FTC information that is used and quoted from by top research organizations like Javelin. As I said to Wm. Morriss in reply to his comment on my blog, it was a matter of interpretation, and his was wrong.<BR/><BR/>At the end of my June 12 post, I even added that Mellon felt these state disclosure laws had additional benefits such as reducing a victim’s average losses and forcing business to clean up its act. The mean fraud victim loss did drop to $5,720 in 2007 from 2006’s $6,278, taking only 25 hours to clean up the mess in 2007, compared to 40 in 2006. However, the breaches continue to march on with a slight increase in the first half of 2008 (173 breaches) over 169 in the same period of 2007.<BR/><BR/>In further confirmation, a recent Javelin study found that identity theft is decreasing at the same rate after these state laws were enacted as it was before. According to the FBI, Internet fraud schemes in 2007 accounted for consumer losses of $239 million, compared to $198 million in 2006. In the actual Carnegie Mellon study, page nine, there is a graph illustrating that states without ID theft laws actually increased in the crime at a slower rate than states passing laws in 2005, but only slightly faster than states enacting the legislation in 2006.<BR/><BR/>Finally, state identity theft laws will not work in the long run, first, because the complexity of dealing with 51 different pieces of legislation is not realistic for business. Second, because many of these state legislatures have limited resources for research, some notification laws end up with loopholes such as allowing the breacher to decide if the loss of personal data could or would cause a loss to the consumer.<BR/><BR/>By the way, congratulations to Ephemerallaw for being named in the top 100 civil liberties advocacy blogs.<BR/><BR/>Jack E. Dunning<BR/>The Dunning LetterJack E. Dunningnoreply@blogger.comtag:blogger.com,1999:blog-1913143473082500114.post-23179218367216907252008-06-18T12:03:00.000-07:002008-06-18T12:03:00.000-07:00Love your blog! It actually was the impetus for me to start mine.<BR/>http://jtidtheftblog.blogspot.com/<BR/>As a specialist in identity theft risk management I find precious little informed material on the subject. thanks for yours.<BR/>John TaylorJohn Taylorhttp://www.blogger.com/profile/15220821369172645158noreply@blogger.com