These companies collect our private information without our consent. When they play fast and loose with that information, they want a pass on penalties for allowing that data to fall into unsavory hands. No matter that this has great impact on the identity and the credit of those compromised. Two things need to happen: 1. If the government continues to allow collection of our data without consent; there needs to be a very strong protection of that information; 2. There need to be the harshest penalties in place for when the next breach happens. They're making money off our backs. They should pay if their security laxity compromises us!