Re: Legislate, regulate
Any company allowing user data to be compromised will be fined ...
No. Don't fine the company. Make the directors of the company personally liable. Send them to prison for the worst violations so they can't just pay off the penalty from the vast fortunes that they will have accumulated by violating others' privacy. Make it hurt.
Then you stand a chance of making a difference.