Yes. Punitive damages are not appropriate to begin with in this case, and certainly not that high.
Once that was decided, such damages don't scale by damage done; they scale by a figure that would inconvenience the company so as to discourage such flouting of their legally-mandated corporate responsibility in the future.