incentives

Data Minimization Collides with Growth Economics

by Shimon|25 June 202630 June 2026|Data Protection Economics, Privacy Friction & Constraint Design

Data minimization is clear in principle. Systems should collect only what is necessary, retain it only as long as needed, and avoid unnecessary exposure. These constraints are codified in policies and embedded in design expectations. On paper, they are unambiguous....

Vulnerability SLAs as a Repeated Game

by Shimon|09 June 202609 June 2026|GRC Games, Operational Tradeoffs & System Constraints

The dashboard showed progress. Critical vulnerabilities were trending down, SLA adherence hovered in the low nineties, and weekly reports highlighted steady movement across teams. Tickets were created, owners were assigned, and remediation dates were tracked. From a governance standpoint, the...

Data Hoarding Is Incentive-Optimal

by Shimon|28 May 202629 May 2026|Data Protection Economics, Data Value & Extraction Dynamics

Data is rarely deleted. It persists in warehouses, backups, and replicated environments long after its purpose has faded. Teams hesitate to remove it—what if it’s needed later, what if deletion breaks something, what if it becomes valuable again. The safer...

Designing for Governance Is a Game You’re Already Playing

by Shimon|21 May 202626 May 2026|GRC Economics, Models in the Wild

Governance is often treated as a structure applied after the fact—policies written, controls implemented, approvals enforced, and compliance measured against defined procedures. The underlying assumption is that once rules exist, behavior will naturally align to them. Yet the same patterns...

Incentive Design in a World Without Perfect Information

by Shimon|26 March 202626 May 2026|GRC Economics, Thinking Like an Economist

The incentives are clear, the expectations are defined, and the governance structure appears aligned. Teams are told what matters, how performance will be measured, and which outcomes are expected. Dashboards track progress, metrics are reviewed regularly, and accountability mechanisms are...