The price of my data

qr-code for this page's url

So Zurich Insurance loses the data (name, address, credit card number, financial details, …) of thousands of customers and get fined a mere £2.2? £50 per customer?  At that price I reckon it is still cheaper to use shoddy procedures and security and just write off the fine if things happen to go wrong.

When will the regulatory institutions start to think in market terms and enforce intended behaviour via the price?