At some point, America is going to run out of the free credit monitoring offered after a data breach, and we're going to need something a little more concrete, like actual data protection laws.