What I make my password should be entirely up to me, with the knowledge that if my data is stolen because I reused a password, it was entirely my fault. I don'

What I make my password should be entirely up to me, with the knowledge that if my data is stolen because I reused a password, it was entirely my fault. I don't really think this needs to be regulated; government-standard guidelines are probably sufficient, with companies knowing that deviating will expose them more to litigation in the event of a problem. Not trying to argue with you, I did read your last sentence, just tossing in another POV.