Regulations regarding technology are always behind the curve. It takes a long time to get regulations passed through the system and technology changes dramatically.

A simple monetray penalty paid to each customer whose data was breached may help. Say, $100,000 per account? $1,000,000? Money talks and it may take large penalties to make companies pay attention to security.