[mcny]

> pay an amazon-bankrupting amount of money

I'd love to see this even though I know it won't happen but I want to go through a mental exercise:

(Off-topic but) where does this money go to? I think about things like traffic tickets or any other fee or fine and I can't think of anything that's any good. If it goes to anything that taxes would go toward, it will cause pressure to decrease taxes and make our governments dependent on this income.

Is there any good answer to this? Prison for the CEO and the board seems much easier in comparison.

[atonse]

I can see that if the intent was malicious. (Like executives made a trade-off that it was totally fine to lose insurance money to pay out in case of a breach, vs hire a security team).

But if it is the more normal circumstance (some vulnerability in the 30 libraries you use, led to the breach), there should absolutely be a monetary punishment but jail time seems too much.