What protections/power do consumers have when their personal information is exposed like this?