I think we're forcing them to manage the data in their stewardship inefficiently. I'd actually love a law that says if my data gets stolen from a company and a

I think we're forcing them to manage the data in their stewardship inefficiently. I'd actually love a law that says if my data gets stolen from a company and a hacker uses that stolen data to harm me, the company must pay for (some portion of) those harms. But today it's setup so even if I don't get harmed they pay some lawyers to make the case go away.