[reset-password]

In practice, the larger the organization the less likely the potential legal sanctions are to dissuade them. My observation has been that once an organization (in the US anyway) grows large enough it is in a special protected status where no real penalties can come to it and there is certainly no risk of exposure to criminal charges for the decision makers.

Source: front page here every single day.

[amon22]

As someone who works for large enterprises: they are absolutely terrified of legal sanctions and pay huge amounts to contractors who can mitigate the risk. And sanctions do regularly happen, they are just not advertised on the HN frontpage I guess :)