> From: Flora <http://www.gmail.com/~flora> > Date: Thu, 17 Nov 2016 22:14:54 -0500 > > This is great. Thanks. Oh, one more thing. Individuals should be able to sue the federal government when they allow breaches, for example the hacking of OPM. > On Nov 17, 2016 9:52 PM, "Robert" <http://dummy.us.eu.org/robert> wrote: > > > > From: Flora <http://www.gmail.com/~flora> > > > Date: Thu, 17 Nov 2016 21:15:36 -0500 > > > > > > Thank you for your additional suggestions. Would you please clarify the two > > > below? I want to be able to understand and explain them. > > > > > > *Companies that maintain or retain personal information be liable via* > > > *the courts. I.e., exclude arbitration clauses from identity theft.* > > > Specifically, what do you mean by "exclude arbitration clauses from > > > identity theft?" Do you mean that they could get out of any liability for > > > identity theft? > > > > Yes. In particular, most arbitration clauses release them from any > > liability related to identity theft and, often, class action lawsuits > > related to such thefts. > > > > > *I'd also ask that the government require that credit score calculations > > > be **open-sourced rather than proprietary.* > > > What do you mean by open-sourced? How would that work? > > > > Their algorithms should be made public. Right now, they are secret and > > it's impossible to tell how any identity theft affects your credit score > > exactly. > > > > > I really like your idea of eliminating social security numbers as a form of > > > ID. This should never have happened in the first place. You and I both know > > > that this is not a very good way to verify someone's identity. With all the > > > breaches we have had, anybody's social security number could be presented > > > as a form of identity. I'm wondering how you could legislate this. > > > > > > Thanks!