"Get consent first" hasn't worked because the average consumer can't give informed consent to the kind of stuff going on behind the scenes.

What about: "If something bad happens because of the data your company shared or lost, it is criminally and financially liable?"