The penalty for breaking a cyber sec law will depend on how much of the data is exposed and how it is exposed. It is not all just about the fees and fines that a data breach can create. Companies may also face a huge backlash in terms of reputation.