that's really the problem. regulatory rules are so impotent violating them is nothing more than an operating expense for large corporations.
We need forfeiture of all revenue earned by violating activities, and C-suite criminal liability. Not that we'd ever get such measures, but it is what it would take, as documented in other countries that have successfully combatted corporate intentional misconduct like this.
