The underlying problem with this event, even if TSA were not involved, is that our government has not thought out the mechanics of what to do with personal data once it is collected. Once the data becomes the property of the government, it is duty-bound to carry out certain safeguards that ensure acts like this do not occur.

Either those safeguards are not in place, or they are not being enforced. In either case, there should be a "stand down" of collecting personal data on U.S. citizens until we can be reasonably assured our information will not be lost, stolen, or compromised.