Assuming those punishments are fair and just - the punishments companies have been getting lately for privacy violations have been relatively consistent - nobody is actually being punished.