This is the information age. If a business has my info they should be morally obligated let alone legally obligated to let me know if/when they discover that their dossier of my info with them is compromised. That way I can take the appropriate steps to protect my own safety and security going forward. Information espionage is here to stay forever. Failure to protect sensitive info is already a felony in several professional fields (HIPPA act in medical care here's looking at you)... Why not extend further protection against the bad guys to more types of information storage mediums. As a citizen of America is it my right to be protected against terrorists both forign and domestic.