2019 AER Conference
By mid-April, 2019, we had already experienced upwards of 50 major data breaches in the US (those are the ones we know of). We’ve heard Facebook’s admission that it has not secured 600 million user passwords since 2012, and we’ve been alerted to the 540 million records, including account names, Facebook IDs, and user activity, that were left exposed. Even our favorite pastime, the amazingly popular game Fortnite, and its 200 million users’ accounts, were compromised and personal account information left vulnerable. And, the list of medical institutions or hospital systems breaches continues to grow daily. All too often, the end result is the same: “The sensitive data included names, patient ID numbers, dates of birth, addresses, phone numbers, health insurance information, payment information, driver’s licenses, and Social Security numbers….” As data sources, from our social media to our medical records, become more co-mingled and accessible, what is the role of the IRB in this contested space of industry, government records, and the research enterprise? This panel will provide an overview of the current state of data risks and security as they pertains to this unregulated space, while delving into topics including the continuing loss of privacy and its impact on minimal risk.