It seems wasteful to spend this thread rehasing the utter disregard the legislative branch has for enacting strong data and privacy legislation (California's CCPA aside), Equifax's willful ignorance towards data security with no consequences for them and no recourse for citizens who had their data leaked, etc. It's not easy, it hasn't been done yet, and it's a high hill to climb. Have to get in front of the folks who write the law, who currently aren't making it a priority.