Read the CNN article, it is an exercise in excuses.
Yeah, “willfully violated”? Really? Since when does it have to be willful? How about RECKLESS or, at the very least, negligent and careless. SHE decided to have her own server, that is a very deliberate decision. SHE mixed secure/non-secure data. SHE didn’t secure the server. SHE put people’s lives at risk.
GO......TO........JAIL.