Companies that suffer from data breaches that could have been prevented should be required to fire the CEO and that CEO gets no compensation. Companies don't take data security seriously because a breach doesn't really effect them. They just go on.

I have no New Year's resolutions. I'm going to be the same person on the 1st as I am on the 31st.