alt Hacker News> include jail time for the decision makers
This is much more important than the fines. But really it should be widened to include not only those who made the decision but also those who implemented it (software developers, designers, project managers) and those who benefited from it (executive officers, shareholders).
Anyone involved with the company who knew what was going on and did nothing to hinder it is culpable to some degree.
With the rank and file I am not 100% sure. I mean, they get paid a fraction of execs and potentially don't have the whole picture.
Additionally, it is really hard to draw a line. For instance, I can develop some logic that could take a screenshot of your phone. It is perfectly fine for debug builds or with explicit user consent while using an app to provide some additional context on some issue. The same logic used to spy on users is not.
I "enable" them, but I won't consider myself responsible or even remotely involved.