Better protecting consumers against harmful IT risks