That is because they are attempting to solve the wrong problem Congress needs to do 3 things 1. Find away to limit and prohibit SSN from being used for Identi

That is because they are attempting to solve the wrong problem Congress needs to do 3 things 1. Find away to limit and prohibit SSN from being used for Identity. 2. Give People Ownership over their PII, end the concept of "who collects it owns it" 3. Make companies liable for damages when they lose control over PII that is collected Congress does NOT, should not, and likely can not create rules and regulations to govern data storage, security, etc. They should stop trying as that is not a problem they need to solve nor is it a problem that should be "fixed" in law