Yeah, fully agree. Fines for companies bigger than a certain threshold should be percentages of their global annual income and potentially include jail time for the decision makers that enabled them.
As long as these are the incentives companies/execs will continue to do this shit
> include jail time for the decision makers
This is much more important than the fines. But really it should be widened to include not only those who made the decision but also those who implemented it (software developers, designers, project managers) and those who benefited from it (executive officers, shareholders).
Anyone involved with the company who knew what was going on and did nothing to hinder it is culpable to some degree.