Companies should just be charged the fine multiplied by the number of offenses (like any individual being charged), then multiplied by the number of employees. Any amount over their available cash, becomes asset seizure (for “too critical to fail” companies) or make them go through bankruptcy to liquidate. Hell, you can even be nice and let them do a “payment plan” over a year or two, seizing all profit until the fine is paid in full. I bet companies would follow laws remarkably well if that were on the line.

The US would just be a couple Facebook privacy violations away from running a governmental surplus for the first time in decades!