I see the point. My misgiving is that jail time means the government can just refrain from enforcing it because the leaders have found favor with one another.

A data breach of 10 million records, times $10k per offense, might not deter Google, but it would raise the eyebrows of smaller violators. An industry of class action lawyers might emerge to specialize in those claims.