The companies they sold user data to should be fined as well. This will discourage others from the act but I'm afraid it has become a tool that's become necessary in today's market. Private companies pay good money for user data, it helps them know what to sell you and how to sell you. It's all geared towards advertising and selling their products. Google is the biggest offender of this crime, they spy on their users all the time.