In addition to improvements in federal practices, consumers need strong state and federal laws in the areas of data protection, notice and other obligations to consumers when there is a failure to protect sensitive data, and preventative tools including the security freeze.