If a company transmits a person's full name, birthdate and ssn unsecurely, can you ask for ID theft protection legally?

Although a secure transmission was requested, a company sent documents including a full name, birthdate and social security number through unsecured email. The individual has since placed a fraud alert on their credit reports, etc. Does this individual have any legal rights to request identity theft protection or any other form of recourse for this very unprofessional and potentially harmful act?