Comment by dmitrygr

This will continue until we make having a huge collection of personal data into a liability and not an asset for companies. Actual jail terms for CEOs for leaks would be a wonderful start. Or, at least, we should have fines that are not wrist-slaps. For example, a fine of $1000 paid to each individual per leak would be a good starting point. Then, companies will properly start minimizing the amount of data they store, in fear of a crippling loss.