The fines should be measured in units of time, not % of revenue, or some fixed dollar number. All other measures can be gamed, except time. For example, Meta would think twice about violating privacy if they were suspended from doing business for a month, or their fine amounted to a month of revenue with definite start and end dates. We already do the same thing with people (taking away their freedom for lengths of t…
I’m all for punishing companies. An easier solution is to combine fines with criminal penalties on citizens who break the laws. Ie if you work for a company and spy on someone, you go to jail as if you didn’t work for the company.