There's something very disturbing about the fact that they can collect my personal information (without my approval); profit on that info (without compensating me); and then get hacked and I have no reasonable recourse for what they've done??
How can they not be liable? How is this not negligence?
How can they not be liable? How is this not negligence?