Banks get fined for data breaches. Regulators will also fine banks for not having clearly documented and auditable release procedures.