We need to attach actual monetary amounts to PII. If a company loses the data they owe you that money. The money is increased based on how and if they disclosed the leak. Lying about a leak should be a criminal offense.

This would would allow engineers to better be able to prioritize security, which typically gets ignored or put low in priority.