That's exactly backwards. In the current regime, it's precisely the billions of people who are affected by data breaches (and who happen to be taxpayers!) who are footing the bill.

Not at all. Make the guilty corporation pay for all of it.

We already are in a system where we foot most of the consequences.