> You need to punish people who don't punish people who don't follow the rules. That's a reflexive rule and is the minimum requirement to get a stable institutional process.

The story here is straight up cybercrime: a French cop who got pinched using police resources for personal and nefarious gains. He's getting 7 years and stiff fine.

What did Equifax in the US get in response to their colossal-scale criminal negligence? Nothing. Zero fines and no one went to jail. Instead they were required to "make a deal" which netted them a tidy profit.