> Large Penalty Maximums This is needed, otherwise there is no real reason to actually protect personal data. Equifax losing the personal data for 50% of Ameri

> Large Penalty Maximums This is needed, otherwise there is no real reason to actually protect personal data. Equifax losing the personal data for 50% of Americans should have resulted in major penalties due to the nature of their security. The other requirements raise the cost of storing this data closer to the damage that can be done by the loss/theft of that data (from the perspective of the data subject).