What we ought to do—to tie into the "let's break up Google" story also being discussed right now—is make collecting and hoarding data about people incredibly risky. A leak of any size should be a "your company is finished" event. Much collection should simply be outlawed or at least placed under strict user control, GDPR-style.

It'd make the CRAs, various other financial institutions (credit card companies, banks), and the tech giants all stop doing a bunch of the most harmful crap they're getting up to. Or else actually pay what it takes to keep everything really secure, while ditching any data they don't absolutely have to have to operate.

I will never unfreeze Equifax, regardless of what I do with the other credit agencies. I can't prevent them from collecting my information but I can prevent them from profiting off it.