CBA in Australia was fined $700 million and Westpac $1.3 billion for mere tens of thousands of transactions that were in breach. They have spent a lot of time and money fixing their shit since then, unsurprisingly.
Fines that punch through to individuals are another great motivator. Health and safety rules suddenly started getting taken a great deal more seriously in my neck of the woods when managers became personally liable for up to $200,000 for breaches.
You'd hope this is where government and its legislative arm would step in to speak up for the 'citizens' but in fact, government is just the other wing of the same bird.
Well they're wrong. You could sentence the board to serve a stint in jail. Or management. Or even everyone that works there.
Want to talk about lighting a fire under people.