Spain just put in place fines equaling to 30% of revenue for data breaches - that’s the only way to make companies care about it directly.