The script by now is painfully familiar: A company reports a major data breach affecting millions of consumers, apologizes profusely, and promises to do better. Most then offer consumers the same tired remedy—free credit monitoring—which does little to address the underlying cause of poor security. As Daniel Castro writes for InsideSources, a better option would be to require companies that are responsible for data breaches to offer consumers a menu of security-enhancing products and services. That would spur consumer adoption of better security and create a market for these services.
