[washadjeffmad]

Is there anything about how breaches are currently remediated that might contribute to better outcomes than if we adopted a higher and harsher penalty system?

It seems like it might create some perverse incentives as the risk escalates.

[ebog]

That's true. I'm sure that the perverse incentive could be resolved with some system for self-reporting and fixing.