Public and private entities storing massive amounts of consumer data have no legal liability to safeguard that same data