Online consumers need a legal framework that imposes security responsibilities on internet companies like Facebook and Google that host our personal data.