This is why we need GDPR in the US. Make the fine like 5% of global annual profit (not sales). Something that will hurt and make them actually think it's not worth it and actively avoid it rather than just the cost of doing business and a snicker as they walk away.
Laws don't seem to matter in this day and age as they can be gamed by money and/or legal tricks. Only way to fix the issue is to get rid of corrupt and unethical government and business leaders. Implementing something like GDPR would only be adding to the arsenal of bad actors.
