Should those incentives not be included in the act, that is to clearly state within the act that all lawyer's fees and costs related to the loss of personal information should be paid by the industry? Could we not include something so that everyone understands?
Both small and large businesses do not take the Privacy Act seriously. I have seen insurance companies sharing information about people who had been involved in car accidents. People from one insurance company would call up staff from another to find out whether a certain individual had already had a car accident while covered by that company. They gladly share personal information. I am not sure that they take serious care of the personal information in their possession.