I wish the gov't had non-fine forms of punishment because "BH must contact all data brokers that have ever had access to BH data and have them permanently delet

I wish the gov't had non-fine forms of punishment because "BH must contact all data brokers that have ever had access to BH data and have them permanently delete it. And no data collected or generated by BH and their users may be accessed by or transmitted to 3rd parties without the express written approval from an FTC regulator who will inspect the data being sent for privacy and HIPAA violations" would cost nothing but get them and every other company in the space to clean up their act.