You'd hope this is where government and its legislative arm would step in to speak up for the 'citizens' but in fact, government is just the other wing of the same bird.
Well they're wrong. You could sentence the board to serve a stint in jail. Or management. Or even everyone that works there.
Want to talk about lighting a fire under people.
CBA in Australia was fined $700 million and Westpac $1.3 billion for mere tens of thousands of transactions that were in breach. They have spent a lot of time and money fixing their shit since then, unsurprisingly.
Fines that punch through to individuals are another great motivator. Health and safety rules suddenly started getting taken a great deal more seriously in my neck of the woods when managers became personally liable for up to $200,000 for breaches.
For example, the most powerful remedy Epic has asked from the court is "adverse inference", which would mean that the judge tells the jury that instead of judging the case on the basis of evidence presented by both parties, they should consider absence of evidence to be in favor of Epic. This can be quite devastating for your case.