Maybe it would result in people taking Internet security seriously and holding companies accountable for data breaches if there were this sort of consequences for it