[sopooneo]

Completely agree on this. A company-killing level of fine, based on number or records exposed, is appropriate. Then the insurance companies would not ensure companies unless they passed stringent audits around best practice and data hygiene.

[bradleyjg]

There ought to be case studies about Transunion in the same classes in business schools where they discuss Bear Stearns.