Just beating my old drum:
The fines involved could tip some of these companies into bankruptcy.
That’s good.
Corporations will behave very differently depending on whether they believe a sufficiently large privacy or security breach could be a company-ending event.
@inthehands Fines never seem effective at that. I just want an explicit corporate death penalty. You do bad enough things, all stock/ownership is nullified and anything of public benefit the company was doing is continued under a restructuring to be publicly owned. Anything purely harmful or superfluous just ceases.