The costs are already socialized - it's our data that gets stolen in hacks. The problem is, the megacorps who lose it must only pay a negligible reputational pe

The costs are already socialized - it's our data that gets stolen in hacks. The problem is, the megacorps who lose it must only pay a negligible reputational penalty. If you could claim compensation for data lost, if businesses had to foot the bill for everybody who's security and privacy is impacted by data breaches, then it would quickly become something they would have to insure against, then the insurers would demand they take reasonable precautions. A system of fines would work well, for instance - an aggressive enforcement of the GDPR or similar, for instance, could create this kind of virtuous circle.