Government could impose fines for not meeting certain security standards, and then do random audits, or in a more free market way this sort of alignment ought t

Government could impose fines for not meeting certain security standards, and then do random audits, or in a more free market way this sort of alignment ought to eventually be able to come about via: 1. Class action lawsuits to sue companies who have data leaks. 2. Companies take out insurance for being sued for data leaks. 3. Insurance companies impose security requirements in order to provide coverage.