[rm_-rf_]

I agree that we should work to determine if there was criminal negligence and prosecute to the highest degree possible, but I find it laughable that you talk about how engineers, capitalism, and private business have completely failed.

The DNC was hacked. The FBI and CIA have had their web sites hacked. The OPM had >22 million people's personal info stolen by Chinese hackers. The NSA itself has had major incidents where essentially cyber weapons were leaked. Those are just SOME of the ones we know about.

Let's stop pretending like government is any more capable, or even as capable, of protecting data than competent corporations. When was the last time Facebook or Google had massive data breach? It's not about 'the corporations maaan' it's about competency and the limited consequences of screwing up so bad.

[antimatter]

Exactly this. I don't know where people get the idea that government would do this any better. I think the best regulators could do is make SSNs obsolete. A solution where knowing every possible private data point about a person is useless when attempting to steal someone's identity.

[ams6110]

Indeed, I have had my personal data compromised more by government agencies than private (at least, as far as I've been officially/personally notified).