I loved how EU set fines for GDPR breaches and I feel the same should be applied in other fields when companies are involved. There are two tiers of penalties, with a maximum of 20m euros or 4% of global revenue. That way they feel it. Really feel it. Google got smacked 50 million € for GDPR breach. H&M 35M.