Representing Privacy Legislation as Business Risks - HOW TECHNOLOGY COMPANIES DISCUSS THE

U C B E R K E L E Y C E N T E R F O R L O N G - T E R M C Y B E R S E C U R I T Y C L T C W H I T E P A P E R S E R I E S Representing Privacy Legislation as Business Risks HOW TECHNOLOGY COMPANIES DISCUSS THE GDPR AND CCPA IN INVESTMENT RISK DISCLOSURES R I C H M O N D W O N G A N D A N D R E W C H O N G C L T C W H I T E P A P E R S E R I E S R I C H M O N D W O N G A N D A N D R E W C H O N G J. [...] 4 A C O M P A R A T I V E S T U D Y O F I N T E R D I S C I P L I N A R Y C Y B E R S E C U R I T Y E D U C A T I O N Background RESEARCH BACKGROUND Much of the prior research on data privacy and privacy risk has focused on a user-centered perspective.5 Privacy scholars Gürses and Hoboken, however, argue that in addition to user perspectives on privacy, it is also important to understand the conte. [...] The concept of risk stems from recognizing inherent uncertainty about the future and the types of responses people can take in the present to address or manage that risk.10 In the business risk disclosure context, the definition of risk disclosure tends to be broad, informing the reader of “any opportunity or prospect, or of any hazard, danger, harm, threat or exposure, that has already impacted u. [...] 11 A C O M P A R A T I V E S T U D Y O F I N T E R D I S C I P L I N A R Y C Y B E R S E C U R I T Y E D U C A T I O N Findings Part 1: When the GDPR and CCPA Emerged as Sources of Risks We first explored when the GDPR and CCPA were specifically mentioned and discussed in the companies’ Form 10-Ks. [...] Facebook began to devote an entire risk factor block 13 A C O M P A R A T I V E S T U D Y O F I N T E R D I S C I P L I N A R Y C Y B E R S E C U R I T Y E D U C A T I O N to discussing the GDPR and the CCPA; Salesforce would do the same in 2020.