Why did it take so long for American companies to better protect their customers’ personal information by turning to the more secure technology that existed and was used in Europe and Asia for many years? Should the government have stepped in and mandated this technology?