Just for this topic from yesterday evening news in German TV:
M$ mail accounts were hacked with passwords and published on the net. So much about laws for privacy. As long the data collectors (and I feel one of the worst seems to be GOOGLE) are careless with our personal data we have to protect ourselves against spying and gathering personal data on the net.
Regarding laws and fines:
as long as our governments try to cancel their own citizen's civil rights on the net (in Germany undercover on-line searches by the BKA (Bundeskriminalamt - comparable to the FBI) are allowed) I personally don't expect much protection of civil rights
and as long as those mainstream companies can pay fines out of the petty cash we can't expect real changes in our privacy security