Soldato
Yes but legislate that the company who's systems have been hacked have to pay the for new cards being issued.
Why legislate .. under PCI-DSS the costs for the replacing cards can be passed down if the merchant has been negligent in their non-compliance ... along with big juicy fines and termination of the ability to accept cards at all ...