Law Commons^™

Remedial Restraint In Administrative Law, Nicholas Bagley

Articles

When a court determines that an agency action violates the Administrative Procedure Act, the conventional remedy is to invalidate the action and remand to the agency. Only rarely do the courts entertain the possibility of holding agency errors harmless. The courts’ strict approach to error holds some appeal: Better a hard rule that encourages procedural fastidiousness than a remedial standard that might tempt agencies to cut corners. But the benefits of this rule-bound approach are more elusive, and the costs much larger, than is commonly assumed. Across a wide range of cases, the reflexive invalidation of agency action appears wildly …

Cybersecurity Stovepiping, David Thaw

Articles

Most readers of this Article probably have encountered – and been frustrated by – password complexity requirements. Such requirements have become a mainstream part of contemporary culture: "the more complex your password is, the more secure you are, right?" So the cybersecurity experts tell us… and policymakers have accepted this "expertise" and even adopted such requirements into law and regulation.

This Article asks two questions. First, do complex passwords actually achieve the goals many experts claim? Does using the password "Tr0ub4dor&3" or the passphrase "correcthorsebatterystaple" actually protect your account? Second, if not, then why did such requirements become so widespread? …