Americans have a right to the security of their personal information, and the entities that hold personal information have a responsibility to protect it.