There is a role for the law in consumer data privacy, but for the most part, rather than looking for ways to regulate and punish, states should stay focused on actual violations of individual rights, such as when personally identifiable data is used to commit identity and financial theft.
