This is correct. But the larger point is that even 1 minute of jail time for such "crimes" is unacceptable.
You might not like this law (and I'm agnostic on it) but I think the principle that individuals should be held accountable when laws are broken is important. Otherwise we just have token fines and corporate non-compliance because the risks don't outweigh the potential financial benefits.
I think people at Experian should have gone to jail, for example, for their incompetence and negligence in regards data breaches.
This is correct. But the larger point is that even though you can put pineapple on a pizza, you still shouldn't.
That larger point deserves its own thread. My newest pet peeve is someone jumping into the middle of a conversation with the equivalent of "I don't care about what you're talking about. What I want to talk about is more important".
Oh look, now you've got me doing it to you. Drat.