I also have a few more ideas:
- Make governments get consequencies for their privacy/security violations.
- Establish a universal, independent, transparant verification mechanism for data breaches. This will prevent databreaches from being falsely reported as not as bad.