The session will cover the following topics:

• Users are increasingly concerned about data breaches.
• The costs of breaches are not borne by those who should protect the data: there are
  externalities.
• Users cannot readily determine which organizations have better security measures:
  there is information asymmetry.
• There is a need to increase transparency (e.g. mandatory reporting of breaches); to
  increase the priority given to the problem; to increase accountability (e.g. an
  organization with inadequate security measures should bear the full costs of a breach);
  and to increase incentives for improved security.
• Inadequately secured IoT devices present an increasing risk that should be
  addressed.