Make it like health records: huge penalties, based on what you store /gets hacked. Then watch them try to get insurance without security.