Big business needs bigger penalties to ensure it protects our data