All the personnel on the seventh floor of these agencies should be examined... especially those from the Obama era.
You're far too lenient.
A lot of the laws violated allow no discretion or consideration of intent; and IIRC failure to report a breach once known, renders one liable as well.