My personal opinion is that in order to make sure that breaches like the Equifax one are preventable and handled correctly, these measures should be imposed 1)

My personal opinion is that in order to make sure that breaches like the Equifax one are preventable and handled correctly, these measures should be imposed 1) An entity storing personal data, must be audited by a government approved 3rd party and their rate must be made public. 2) Any breach (or suspicion of a breach) must be reported to this 3rd party within 24 hours. The issues I saw with the Equifax breach was that there was NOTHING that told us how bad their security was and they were allowed to not report the breach for a month.