Usually when the solution is "just remember to do X", you've found a bad solution.

Re-approach the problem from a different perspective - companies don't value their customer's privacy enough. What solution can we put in place to force them to care about their customer's privacy? Can we force them?

You have to start there for a worthwhile solution.