Amid AI craze, what will it take for firms to take data security seriously?

With growing interest in generative AI tools such as ChatGPT likely to accelerate data collection, is hitting them where it hurts most the only way to get businesses to collect only what they need and protect what they collect?