

If someone stoles the data then the corp can’t be trusted. Punishment: erase ALL records from ALL of their databases and forbid that corp to take data for at least one year. The time would depend on the severity of the leak. If the leak if catastrophic, 10 years minimum.
If we don’t dodge that bullet, Years and Years. Or Neuromancer.