Severe financial liability for security breaches, severe enough that, for instance, companies which leak 1m+ user data are driven to bankruptcy

[yes, this would also get rid of the previous generation of 1000-JS-lego vibers]