We need regulations that fine companies in the neighborhood of $10,000 per violation (i.e. per person whose info was compromised) plus potential prison time for

We need regulations that fine companies in the neighborhood of $10,000 per violation (i.e. per person whose info was compromised) plus potential prison time for company officers in cases of egregious violations, which this appears to be. Until prison time is on the table, companies will continue to collect, store, and sell personal information and will continue to fail to implement best practices for protecting it.