Companies should be held accountable when they fail to protect customer data. Heavy fines that actually cut into profits would go a long way to incentivize businesses to protect the privacy of consumers. At the very least, the increased liability would make companies reconsider the type and amount of data that they want to collect and manage.