“The rewards for multinationals creating new technologies are rightly vast, but it is only fair that the penalties for inadvertently or directly breaching data liabilities are sufficiently restraining.”