Paul Rubin headshot

Emeritus Professor
Emory University

Professor Rubin’s main area of research is Law and Economics. He has written on many aspects of this subject. Recent papers have examined the effects of tort reform on death rates (tort reform leads to fewer accidental deaths) and the deterrent effect of capital punishment (it is a significant deterrent). He has also completed a survey article on the economics of the Bill of Rights. (These papers have been coauthored with colleagues at Emory.) A few years ago he completed a book on the evolution of economic and political behavior. He also write on policy issues, and has had several op-eds in the Wall Street Journal and other newspapers. Two favored topics are the regulation of pharmaceuticals and the economics of privacy and information.

Data Security


Popular Media

Proposed Privacy Legislation

The Obama Administration is advocating a privacy bill.  One provision will limit the use of data to the purpose for which it was collected unless a consumer gives permission for additional uses; another will give consumers increased rights to access information about themselves.

Both of these provisions may actually reduce safety of data online.  One additional purpose for which data can be used is to verify identity in cases where there is some doubt.  Many of us have had the experience of having a merchant call a credit card company and ask a series of questions to verify our identity.  This bill would apparently make that process more difficult.  This would lead either to increased inconvenience or increased risk.  This provision is enforced in Europe and there is some evidence that identity theft is more common there.

There is also a danger of allowing increased access to information.  A thief who obtains some information about a consumer may be able to use this to spoof   the system and obtain access to much more information, which will facilitate more harmful forms of theft.

The more fundamental issue is that there is no cost benefit analysis showing that any regulation is justified, as I showed in my previous post on this issue.

Filed under: privacy