Seems like a kneejerk reaction. For example, I can imagine kneejerk legislation that would simply ensure that next time this happens, Twitter just keeps their

Seems like a kneejerk reaction. For example, I can imagine kneejerk legislation that would simply ensure that next time this happens, Twitter just keeps their lips zipped. Not exactly an improvement. Can you pitch an example of what this legislation would actually look like? And how it would differentiate between something like the Experian leak and some (oh no) Twitter passwords getting logged internally.