Most crimes are left unpunished, even more so corporate crimes, because it's usually very hard to prove there is one, to demonstrate who is guilty, and costly t

Most crimes are left unpunished, even more so corporate crimes, because it's usually very hard to prove there is one, to demonstrate who is guilty, and costly to sue for little gain. In fact for corporate crimes, it's even worse, because there is little skin in the game: rare jail time and fines that are only a subset of the money earned by committing the crime, when there is any. Make it 2 months of jail + 1 one day for each patient data which has been breached for eveyrbody in the chain of command responsible, and you'll wager it will happen a lot less.