I really like the trend of making software companies liable for security incidents. Way too often they get away without any penalty.