Here are some good things that could come out of this:
1: A national ID act which establishes an ID more secure than the SSN. Which is to say, an ID which has some type of security feature.
2: A law which prohibits binding arbitration as a means of avoiding civil action.
3: Data aggregation laws which specify how data aggregators must treat the data they collect, and specifies penalties and civil remedies for violating those laws.