We already had some of that with the Target credit card fuck up that birthed PCI rules, which in turn birthed lots of payment card processors just so companies could wash their hands of all card holder PII rather than meet with their insane auditors.