As cynical as it sounds given its frequent use in marketing and often inappropriate use in legal circles, securing what data is collected is important too.

Raise the bar for a data breach. It has value. Much more value if the law did a much better job of restricting what is collected in the first place and its dissemination.