As cynical as it sounds given its frequent use in marketing and often inappropriate use in legal circles, securing what data is collected is important too.
Raise the bar for a data breach. It has value. Much more value if the law did a much better job of restricting what is collected in the first place and its dissemination.
Punishing companies for data breaches will solve more data breaches than any amount of encryption.
I find that particularly unrealistic that we can arrive at a good place solely by fining companies for data breaches.
Seems to mostly work in Europe. Did you know that a European person's advertising tracking data is the most expensive because it's so hard to get?
hear hear