It seems like passing legislation that imposes harsher penalties for data breaches is the way to go.