What "good faith" are you talking about?
Without some level of good faith, there’s no path back for organisations. The only acceptable form of remediation would be dissolving the company entirely, which huge impacts on many people.
Certainly past regulation has been a little toothless. But laws like GDPR with their maximum set as a percentage of global revenue show that governments are catching up. Those fines can be large enough to inflict real pain and damage to corporations that repeatedly misbehave.
To my knowledge, such a large fine has never been imposed in 5 years, despite rampant noncompliance across the entire industry, including Big Tech, with countless complaints having been filed but gone nowhere.
The fine was 25,000 Euros. That's insane. That business should have been closed down and the responsible person jailed. GDPR enforcement is a joke.
https://www-ris-bka-gv-at.translate.goog/Dokumente/Dsk/DSBT_...
The goal is compliance, not punishment. So it's better to give them a chance to comply, a warning, and then prosecute and fine if they continue to flout the rules.
So I don't think they have a clean record now, and people are simply wise to be skeptical.
Depends what you mean by "maximally." I think it's safe to assume that every company tries to maximize dishonesty after accounting for its cost (i.e. fines).
While the EU can't make corporations pay their share of taxes, it can at least rely on them willing to break the law rather than change their business model.
I don't if that's really the case though.
From the tech industry which known for its surveillance capitalism? They should be imposing regular audits of the systems as a pre-condition for allowing them to even exist.