From Bruce Schneier:
"...[t]here is no monetary incentive for companies to invest in the cybersecurity measures needed to keep their products secure. Consumers will buy products without proper security features, unaware that their information is vulnerable. And current liability laws make it hard to hold companies accountable for shoddy software security. It falls upon lawmakers to create laws that protect consumers."