A winning proposal: Allow the FTC to fine for data breaches, pay those who suffer