I would love to see such regulation appear. The recent chip and pin law also states that the one liable is the one with the least security. I also think that's

I would love to see such regulation appear. The recent chip and pin law also states that the one liable is the one with the least security. I also think that's a brilliant way to do it. Don't want to be liable? Then you better have the more modern security system. I also like the idea of outsourcing the security/storing of data. Then we'd have companies that become real experts at that, and all the "idiots" would default to using those companies, instead of doing it themselves, poorly.