@SecureOwl Personal Identifiable Information (PII) is best thought of as oily rags that companies keep around to squeeze for oil. (hat tip @pluralistic )

So OpenAI and their friends Mixpanel had an in-house fire of oily rags, but luckily, there was no fire damage at OpenAI. Well, then.

Seems to me that any company that keeps PII ought to be required to carry data breach insurance, or at least put sufficient money in escrow to pay customers for damages when the inevitable breach occurs.

Maybe $5/user/calendar quarter, maybe less if the company gets an annual audit that shows compliance with data privacy standards.