> Credit and financial information is impossible to keep safe and available to any cyber criminal who wants it.

Which is why legislation should be aimed at preventing law-abiding entities from ever storing it in the first place. Obviously, criminals cannot steal what is not there.

Enforcement of these laws has been mild, and all companies and criminals know this. Only the odd major embarrassment seems to motivate companies to protect user data.