Yeah, it's about time the people responsible were given prison sentences or made personally liable for fines. Fines on company profits generally have little effect since the company just writes it off against profits so share bonuses are lower next year, or they put there prices up to cover it. Not only does the customer get screed over from the data loss, but they end up paying the fines too.
If it can't be tied to a specific individual, then the board get it in the neck since it's their job to run the company and their job to take the fall when things go wrong. That's why they get paid so much in the first place.
Biting the hand that feeds IT
