Noone cares about anything, unless they're the one affected by this.

I don't care if people around me don't have car insurance, but once one of them crashes into my car, i sure want them to have one, while the rest will continue not caring.

So yes, requiring companies to safeguard data, even if that means fines and criminal charges for responsible people is important.