I personally believe companies should be fined regardless. But one caveat I’d add to your point. Companies should not have a free pass for losing data that isn

I personally believe companies should be fined regardless. But one caveat I’d add to your point. Companies should not have a free pass for losing data that isn’t directly required for providing the service the user requested; or when storing data the user did not give them permission to acquire. Data should be a liability not an asset.