If you're personally targeted, picked out as a target, and then they go looking for your data, then sure. But having your info percolate up from a bunch of big data sets, being mined for targets? Then there is plenty you can do to obfuscate and minimize your exposure. Like the old joke - "I don't have to outrun the bear, I just have to outrun the other campers".If someone wants your info badly enough, they can get it. That's just the price of the convenience and near infinite wealth of information we have with the internet now. I don't believe any bill that congress can pass will change that.
Congress could have civil penalties for being hacked - other than inside jobs, most hacks result from gross incompetence, just simple negligence, like Walmart and OPM. Make it hurt, big $$$$$, and suddenly their security will improve. . .