Make companies liable for any costs incurred by private individuals due to the negligent release of their personal data.
This would immediately make companies take their data security seriously.