Comment by nabnob

They're only subject to large fines if those laws are in place and actually being enforced, though. Companies keep getting away with these huge data breaches in the United States with almost no real consequences.