I was just reading about a violation of the Canadian fisheries act that has a maximum penalty of $200k, and realized the absurdity of there ever being a maximum fine.
There should be no maximum fine on any corporate penalty given that we do not cap the size of corporations or their bank accounts.
It would be like having maximum jail terms of 25 years for immortal beings that can live to 10,000.
Not income, global revenue of the parent company, like GDPR does it
So if Google fucks up, it’s the full revenue of Alphabet Inc that determines the fine.
That way you can’t found GDPR Violation Incorporated and do your shady stuff there risk free.
Meanwhile, Google is illegally chopping down a forest to make space for a data centre. Those fines should be proportional to revenue too. That would teach them not to mess around with trees.
trees are different. malicious removal of them for profits is even worse. the fine should also be recurring, and paid-in-full annually until that forest is restored to its former condition.
So… about 100-200 years?
Has anyone actually got hit with big gdpr fines?
Lots of ‘em for meta; just about all US big tech.
https://www.enforcementtracker.com/
Those are fines that have been given but did they actually pay? Or was it just a big headline the one time and then they appealed it and 5 years later it’s reduced to nothing.