Yeah it's about costs. I care about a lot of things, but the causes I actually give money to is a much shorter list. If personal data was radioactive, and leaking it cost companies real money, then more money would get spent on security. (and insurance, and lawyers.)

▲

josephg a day ago | parent [-]

Yeah I've long said we should treat data leaks like food safety. The only way we'll see software security improve is if there were serious fines and/or jail time for leaking user data due to negligence.

▲

pylua a day ago | parent [-]

PCI compliance works pretty well.

I would like to see restricted access to only us workers for us citizens data though.

Transferring us customer data outside the country should be illegal

▲

guerrilla a day ago | parent [-]

PCI compliance is a joke. That isn't even close to good enough. I'll break all your PCI compliant stuff trivially.

	▲	pylua a day ago \| parent [-]
		What’s your main issue ? The compliance audit being lax or the compliance not being assertive enough ?