Speaker Series: Shauhin Talesh

Despite the massive costs associated with data breaches, ransomware, viruses, and cyberattacks, most organizations remain thoroughly unprepared to safeguard consumer data. Over the past two decades, the insurance industry has begun offering cyber insurance to help organizations manage cybersecurity and privacy law compliance, while also offering risk management services as part of their insurance packages. These insurers have thus effectively evolved into de facto regulators — yet at the same time, they have failed to effectively curtail cybersecurity breaches.

Drawing from interviews, observations, and extensive content analysis of the cyber insurance industry, this book reveals how cyber insurers’ risk management services convey legitimacy to the public and to insureds but fall short of actually improving data security, rendering them largely symbolic. Speaking directly to broader debates on regulatory delegation to nonstate actors, Prof. Talesh proposes a new institutional theory of insurance to explain how insurers shape the content and meaning of privacy law and cybersecurity compliance, offering policy recommendations for how insurers and governments can work together to improve cybersecurity and foster greater algorithmic justice.

To register, contact Sophie Kofman at skofman@abfn.org. 

Shauhin Talesh is an interdisciplinary scholar whose work spans law, sociology, and political science. His research interests include the empirical study of law and business organizations, dispute resolution, consumer protection, insurance, and the relationship between law and social inequality. Professor Talesh is considered one of the leading scholars on organizational responses to law and compliance and the relationship between insurance, regulation and inequality.

Talesh’s empirical research addresses the intersection between organizations, risk, and consumer protection laws, focusing on private organizations’ responses to and constructions of laws designed to regulate them, consumers’ mobilization of their legal rights and the legal cultures of private organizations. His most recent research focuses on how cyber insurance and insurance companies shape cybersecurity and privacy law compliance among private organizations. He previously published multiple articles on how insurance companies, through employment practice liability insurance, construct the meaning of compliance with anti-discrimination laws.