Re: It's not enough
I don't think fines are the right solution. Mainly because they can just become cost of sales and probably expensed.
A simpler solution should be to just adopt the same tech utilised to monitor other home invaders. So fit all C-level execs involved in privacy invasion with ankle tags. Then for every type of data slurped, publish that under each execs corporate bio page. Add say, 10yrs in jail for any attempt to avoid publication of their 'private' information.
It may just be a way to administer a clue-bat, although may require building a few more prisons.