Companies have been using data brokers to get info on potential employees for ages in violation of the law. The law has almost zero enforcement and when something is done nobody does to prison. It's almost always just the government wanting a cut of the action. For example:

https://www.ftc.gov/news-events/news/press-releases/2012/06/...

https://www.ftc.gov/news-events/news/press-releases/2014/04/...

Prison is a limitation of freedom of movement. The equivalent for a company should be the limiting of movement of shares (no shares bought/sold/traded) for the duration of an imposed sentence. Since corporations are people and all, there needs to be an equivalent punishment.