Mere fines for bad behavior simply become part of the cost of “doing business” unless the fines are significantly larger than the business’ assets. Banning, jailing, and fining the responsible executives would help, but the current “oh you naughty boy” response where the fines are significantly is a rounding error and the company gets to keep and benefit from their ill-gotten gains/data will never be effective deterrents