Just a quick gut-check: are we sure this is working well with accounting firms? They're all merging again post-Arthur-Anderson scandal with their services cons

Just a quick gut-check: are we sure this is working well with accounting firms? They're all merging again post-Arthur-Anderson scandal with their services consulting businesses and while there may be controls and training and they're all pretty serious about it (I worked for such a company at one point) it doesn't seem like many folks are getting dinged on violations of late. I agree that it is worth the cost (as a citizen whose data is being lost) but in the current landscape the companies may argue that it is not, and might be right.