> One question I have is how would you propose that number be calculated? As a percentage of worldwide revenue on a sliding scale. > In truth, I think the com

> One question I have is how would you propose that number be calculated? As a percentage of worldwide revenue on a sliding scale. > In truth, I think the company whose data has been leaked should know exactly how many records have been leaked, but per-individual based fines create an incentive for them to underreport this number. Very true, so triple damages for wilful underreporting and/or criminal sanctions for individuals.