How else do we incentivize companies to make sure things like this don't happen, if there's no punishment for companies who do them repeatedly?