> all that needs to be done is to make sure that the liability for leaked data falls on the user I don’t think that was the point of what the parent commenter

> all that needs to be done is to make sure that the liability for leaked data falls on the user I don’t think that was the point of what the parent commenter was saying. As I read it, they were talking not about liability but the likely negative side effect of having more people be conned out of their private data that will then be abused. Who is liable is a secondary concern. The main problem is the fact that people’s private data end up in the wrong hands.