That's an interesting thought, especially if a breach is because of negligence, or a repeated pattern, or both. For instance, consider Facebook, I'd imagine th

That's an interesting thought, especially if a breach is because of negligence, or a repeated pattern, or both. For instance, consider Facebook, I'd imagine their response and actions for remediation would be quite different if such a law would exist - as for Facebook it's a repeating pattern.