David, I agree but want to go on to say I *hope* the states are held responsible.  As much as I love the great state of North Carolina, it's obvious to me that only threat of or actual lawsuit will reign them in. 

Citizens are generally blissfully unaware that their information is available online whether as insurance applicants or deed-holders, but always express shock when they learn how carelessly their own government officials are handling such information. 

Today I ran across mention of North Carolina's "E-Council" in reference to the statewide register of deeds system.  Further investigation proved just what we've come to expect, that this 'council' is a bonafide partnership between our registries and data brokers.  It's no wonder the registry system appears unconcerned with privacy breach.  They facilitate it - for profit.