> The fine should be proportional to the damage. A tiny medical startup that leaks psychotherapy records “hurts” more than a company that leaks your shoe size.

> The fine should be proportional to the damage. A tiny medical startup that leaks psychotherapy records “hurts” more than a company that leaks your shoe size. I agree. I meant that market cap should be taken into account along with factors such as damage. The goal is that for the same wrong, a small and a large company face the same penalty, but adjusted in proportion to their financials.