Does Industry Self-Regulation of Consumer Data Privacy Work?

Data privacy and security have generated far less evaluative research to date about different policy interventions than many other industries. As the public, government, and industry continue to consider data privacy as a product subject to contract, transaction, and fair treatment, the need for practical assessments of privacy and security will grow. This will require the cooperation of multiple research disciplines and a demand for rigorous evaluation, regardless of whether the regulatory environment retains the status quo or shifts dramatically going forward. © 2017 IEEE.