In recent years, citizens have found themselves agreeing to an increasing amount of collection of their personal information on behalf of corporations. Often times the agreement is an implicit or explicit requirement of doing business with the entity in question and thus often gets ignored or traded off as some business services are effectively essential.
We recognize that corporations require some information to conduct their business but want them held to a higher standard of security and fiscal liability when they fail to protect information especially as they often profit from it. The penalties and compensation should reflect the time spent in resolving a case of identity theft and be issued to impacted citizens if they suffer from ID theft within several years from the breach.