So...
... if I happen to be a customer of one of the organisations fined, I get penalised for their incompetence, because you can bet that the board won't do the right thing and bear the penalty themselves (as they should as custodians of the company/body). I'm almost OK with that if it's not a monopoly (like a council or a water company) because I'm free to clear off to another. Where it's a monopoly though I have no realistic choice but to pay (you have to move to another council area to escape, or another region if it's water...) for the incompetence.
Surely the sensible thing to do is to institute criminal proceedings against the entity and upon conviction, jail the appropriate member of the board/executive - and pursue them for the costs of incarceration. I do not see why the consumer should pay for the negligence/criminality of a body of whom they're (often reluctantly) a customer.