Fines, when backed by strong regulation, can lead to more control and better quality information, but only if companies are actually held to account.