"Google is being ordered to pay A$60 million"
Coffee money once more.
It's unfortunate that [a] privacy regulators preferentially pursue behemoth infringers but mostly ignore the vast groundswell of general abuse, and [b] the penalties applied to the behemoths are so utterly trivial that they don't drive any change of behaviour.
The net result is good PR for the regulators while the abusers proceed on their merry way as if nothing had changed. However it jibes with a common position (at least here in the UK) of government departments when they propose legislation - "to demonstrate that we take [whatever] seriously". PR again and always PR - the legislation doesn't have to actually protect anyone.