Encryption and the Loss of Patient Data

Fast-paced IT advances have made it increasingly possible and useful for firms to collect data on their customers on an unprecedented scale. One downside of this is that firms can experience negative publicity and financial damage if their data are breached. This is particularly the case in the medi...

Full description

Bibliographic Details
Main Authors: Tucker, Catherine Elizabeth, Miller, Amalia R.
Other Authors: Sloan School of Management
Format: Article
Language:en_US
Published: Wiley Blackwell 2013
Online Access:http://hdl.handle.net/1721.1/75854
https://orcid.org/0000-0002-1847-4832
_version_ 1811080237457342464
author Tucker, Catherine Elizabeth
Miller, Amalia R.
author2 Sloan School of Management
author_facet Sloan School of Management
Tucker, Catherine Elizabeth
Miller, Amalia R.
author_sort Tucker, Catherine Elizabeth
collection MIT
description Fast-paced IT advances have made it increasingly possible and useful for firms to collect data on their customers on an unprecedented scale. One downside of this is that firms can experience negative publicity and financial damage if their data are breached. This is particularly the case in the medical sector, where we find empirical evidence that increased digitization of patient data is associated with more data breaches. The encryption of customer data is often presented as a potential solution, because encryption acts as a disincentive for potential malicious hackers, and can minimize the risk of breached data being put to malicious use. However, encryption both requires careful data management policies to be successful and does not ward off the insider threat. Indeed, we find no empirical evidence of a decrease in publicized instances of data loss associated with the use of encryption. Instead, there are actually increases in the cases of publicized data loss due to internal fraud or loss of computer equipment.
first_indexed 2024-09-23T11:28:01Z
format Article
id mit-1721.1/75854
institution Massachusetts Institute of Technology
language en_US
last_indexed 2024-09-23T11:28:01Z
publishDate 2013
publisher Wiley Blackwell
record_format dspace
spelling mit-1721.1/758542022-09-27T19:41:57Z Encryption and the Loss of Patient Data Tucker, Catherine Elizabeth Miller, Amalia R. Sloan School of Management Tucker, Catherine Elizabeth Fast-paced IT advances have made it increasingly possible and useful for firms to collect data on their customers on an unprecedented scale. One downside of this is that firms can experience negative publicity and financial damage if their data are breached. This is particularly the case in the medical sector, where we find empirical evidence that increased digitization of patient data is associated with more data breaches. The encryption of customer data is often presented as a potential solution, because encryption acts as a disincentive for potential malicious hackers, and can minimize the risk of breached data being put to malicious use. However, encryption both requires careful data management policies to be successful and does not ward off the insider threat. Indeed, we find no empirical evidence of a decrease in publicized instances of data loss associated with the use of encryption. Instead, there are actually increases in the cases of publicized data loss due to internal fraud or loss of computer equipment. National Science Foundation (U.S.) (Grant 1053398) 2013-01-07T19:25:09Z 2013-01-07T19:25:09Z 2011-05 Article http://purl.org/eprint/type/JournalArticle 0276-8739 1520-6688 http://hdl.handle.net/1721.1/75854 Miller, Amalia R., and Catherine E. Tucker. “Encryption and the Loss of Patient Data.” Journal of Policy Analysis and Management 30.3 (2011): 534–556. https://orcid.org/0000-0002-1847-4832 en_US http://dx.doi.org/ 10.1002/pam.20590 Journal of Policy Analysis and Management Creative Commons Attribution-Noncommercial-Share Alike 3.0 http://creativecommons.org/licenses/by-nc-sa/3.0/ application/pdf Wiley Blackwell SSRN
spellingShingle Tucker, Catherine Elizabeth
Miller, Amalia R.
Encryption and the Loss of Patient Data
title Encryption and the Loss of Patient Data
title_full Encryption and the Loss of Patient Data
title_fullStr Encryption and the Loss of Patient Data
title_full_unstemmed Encryption and the Loss of Patient Data
title_short Encryption and the Loss of Patient Data
title_sort encryption and the loss of patient data
url http://hdl.handle.net/1721.1/75854
https://orcid.org/0000-0002-1847-4832
work_keys_str_mv AT tuckercatherineelizabeth encryptionandthelossofpatientdata
AT milleramaliar encryptionandthelossofpatientdata