I propose that the fines be per piece of information leaked, and combinations of information:

$1 for name

$2 for address

$3 for email

$4 for phone number

$5 for social security number

--------

and multiply for combinations thereof.