Law.com Subscribers SAVE 30%

Call 855-808-4530 or email [email protected] to receive your discount on a new subscription.

<b>Online Exclusive:</b> Study Finds Weak Link Between Privacy Breach, Stock Price Slippage

By ALM Staff | Law Journal Newsletters |
July 11, 2006

A new study by professors from Carnegie Mellon and Harvard has found only a short-term link between a public company having a well-publicized privacy breach and a reduction in its stock price. The findings, which the professors emphasize are 'very preliminary,' challenge the conventional wisdom that companies should invest heavily in protecting customers' privacy because the marketplace will punish them. The draft paper can be read at http://weis2006.econinfosec.org/docs/40.pdf.

In the study of 79 well-publicized privacy breaches, Alessandro Acquisiti (Carnegie Mellon), Allan Friedman (Harvard), and Rahul Telang (Carnegie Mellon) found that a company's stock price falls on the day that a privacy incident is announced, but in less than a week, the price shows no negative impact. The findings contradict anecdotal evidence that companies such as ChoicePoint are punished in the stock market by poor privacy practices.

The authors calculated that a company's stock price falls by about 0.4% on the day a breach is announced, after factoring out all other market and company developments on that day. The stock price dip continues into the next day, reaching nearly 0.6%. But by 5 days after a breach is announced, the stock price has rebounded into positive territory. Retailers suffer greater drops, as would be expected due to their sensitivity to consumer trust issues. And larger breaches generate larger effects.

The quick rebound of stock prices indicates a different reaction to privacy breaches than to other types of security breaches, the authors added. Several studies published in the past few years indicate that when a company suffers a security breach (hackers, denial of service, etc.), the impact is significant and long-lasting.

However, the authors acknowledge the difficulties of quantifying the privacy-breach effect. Complicating factors include: determining how much of a stock price movement can be tied to the single breach event; dating when a breach first became widely known to the public; and assessing whether the full extent of the breach was known in the initial announcement.

A new study by professors from Carnegie Mellon and Harvard has found only a short-term link between a public company having a well-publicized privacy breach and a reduction in its stock price. The findings, which the professors emphasize are 'very preliminary,' challenge the conventional wisdom that companies should invest heavily in protecting customers' privacy because the marketplace will punish them. The draft paper can be read at http://weis2006.econinfosec.org/docs/40.pdf.

In the study of 79 well-publicized privacy breaches, Alessandro Acquisiti (Carnegie Mellon), Allan Friedman (Harvard), and Rahul Telang (Carnegie Mellon) found that a company's stock price falls on the day that a privacy incident is announced, but in less than a week, the price shows no negative impact. The findings contradict anecdotal evidence that companies such as ChoicePoint are punished in the stock market by poor privacy practices.

The authors calculated that a company's stock price falls by about 0.4% on the day a breach is announced, after factoring out all other market and company developments on that day. The stock price dip continues into the next day, reaching nearly 0.6%. But by 5 days after a breach is announced, the stock price has rebounded into positive territory. Retailers suffer greater drops, as would be expected due to their sensitivity to consumer trust issues. And larger breaches generate larger effects.

The quick rebound of stock prices indicates a different reaction to privacy breaches than to other types of security breaches, the authors added. Several studies published in the past few years indicate that when a company suffers a security breach (hackers, denial of service, etc.), the impact is significant and long-lasting.

However, the authors acknowledge the difficulties of quantifying the privacy-breach effect. Complicating factors include: determining how much of a stock price movement can be tied to the single breach event; dating when a breach first became widely known to the public; and assessing whether the full extent of the breach was known in the initial announcement.

Read These Next
The Article 8 Opt In Image

The Article 8 opt-in election adds an additional layer of complexity to the already labyrinthine rules governing perfection of security interests under the UCC. A lender that is unaware of the nuances created by the opt in (may find its security interest vulnerable to being primed by another party that has taken steps to perfect in a superior manner under the circumstances.

Major Differences In UK, U.S. Copyright Laws Image

This article highlights how copyright law in the United Kingdom differs from U.S. copyright law, and points out differences that may be crucial to entertainment and media businesses familiar with U.S law that are interested in operating in the United Kingdom or under UK law. The article also briefly addresses contrasts in UK and U.S. trademark law.

Warehouse Liability: Know Before You Stow! Image

As consumers continue to shift purchasing and consumption habits in the aftermath of the pandemic, manufacturers are increasingly reliant on third-party logistics and warehousing to ensure their products timely reach the market.

Legal Possession: What Does It Mean? Image

Possession of real property is a matter of physical fact. Having the right or legal entitlement to possession is not "possession," possession is "the fact of having or holding property in one's power." That power means having physical dominion and control over the property.

Strategy vs. Tactics: Two Sides of a Difficult Coin Image

With each successive large-scale cyber attack, it is slowly becoming clear that ransomware attacks are targeting the critical infrastructure of the most powerful country on the planet. Understanding the strategy, and tactics of our opponents, as well as the strategy and the tactics we implement as a response are vital to victory.