You’re right: money is an imperfect remedy for breaches of privacy — but I’m not sure what’s better. One thing that is clear, I think, is that the current system doesn’t provide adequate incentives for companies to build security into their products. Given the complexities of tort law, finding the right balances will be difficult — but it needs to happen.