Data breach disclosure laws and corporate tax planning activities

Yanlei Zhang

Journal of International Accounting, Auditing and Taxation2026https://doi.org/10.1016/j.intaccaudtax.2026.100749article
AJG 3ABDC B
Weight
0.50

Abstract

Cybersecurity has become an increasingly critical challenge worldwide. Prior literature demonstrates that cybersecurity breaches can adversely affect corporate operations and financing activities. However, the understanding of how firms can proactively prepare for future cybersecurity threats remains limited. We posit that firms could intensify their tax planning efforts to reserve internal cash flow to mitigate the potential shock of future cybersecurity threats. To investigate this, we leverage the staggered adoption of data breach disclosure laws in the United States, the first country to implement this type of cybersecurity legislation, as our research setting. The enhanced disclosure requirements heighten firms’ concerns and awareness about cybersecurity risk, and we find that firms increase their tax planning following the enactment of these disclosure laws. Consistent with our theoretical arguments, this relation is more pronounced when a firm is likely to face more severe losses from data breaches, when it is more financially constrained, and when it has a higher incentive to protect shareholders’ interests. Conversely, we find that tax planning efforts diminish in firms with high levels of IT capabilities. Moreover, proactive tax planning can help mitigate the negative effects of data breaches. We also demonstrate that federal guidance on cybersecurity disclosure and the Tax Cuts and Jobs Act further stimulate firms’ tax planning activities. Overall, this study suggests that tax planning can serve as a risk-management strategy to alleviate the potential shocks associated with cybersecurity risks.

Open via your library →

Cite this paper

https://doi.org/https://doi.org/10.1016/j.intaccaudtax.2026.100749

Or copy a formatted citation

@article{yanlei2026,
  title        = {{Data breach disclosure laws and corporate tax planning activities}},
  author       = {Yanlei Zhang},
  journal      = {Journal of International Accounting, Auditing and Taxation},
  year         = {2026},
  doi          = {https://doi.org/https://doi.org/10.1016/j.intaccaudtax.2026.100749},
}

Paste directly into BibTeX, Zotero, or your reference manager.

Flag this paper

Data breach disclosure laws and corporate tax planning activities

Flags are reviewed by the Arbiter methodology team within 5 business days.


Evidence weight

0.50

Balanced mode · F 0.40 / M 0.15 / V 0.05 / R 0.40

F · citation impact0.50 × 0.4 = 0.20
M · momentum0.50 × 0.15 = 0.07
V · venue signal0.50 × 0.05 = 0.03
R · text relevance †0.50 × 0.4 = 0.20

† Text relevance is estimated at 0.50 on the detail page — for your query’s actual relevance score, open this paper from a search result.