There's a fairly simple solution to this. Instead of $1,000 per breach, the IRS penalty for unlawful disclosure should be the Adjusted Gross Income of the individual or entity for each year a violation occurred. Other Federal agencies take special measures and maintain much tighter control over...