Many of the provisions would actually end up harming consumers in the long-term rather than helping them.

But, in the event there is a fraud, the consumer's not liable. Usually, it's the bank that has to suffer the loss, so they have a huge incentive to make sure the data is protected.