That sounds good but I hope the disparity of the effect and punishment is obvious: victims lost their lives because data existed that probably should not have been collected and the people responsible for the leak are alive and will be free in 10-20 years.