> This issue can be solved with mandatory insurance and compensation structure. For this sensitive private health information compensation should be at least 5

> This issue can be solved with mandatory insurance and compensation structure. For this sensitive private health information compensation should be at least 5 figures per person, no excuses. A data breach involving 10,000 people could cost 100s of millions. Cheaper to not worry about that and just pay the hackers occasionally then. In market based economies, the state is not serious about fines and convictions of corporations because the state doesn't want to be responsible for making monopolies of the remaining companies in the country. You can read more about this in the book "The Chickenshit Club"