Bankrupt this company to serve as a warning to others that hang on to way too much data.

In addition, actual federal prison time for the C-levels would help as a deterrent to future fuckery.

This is the actual answer. Things like this need to be a criminal offense.

Monetary fines have a tendency to simply be modeled in as a cost of doing business. Going to prison is far more effective when the goal is to concentrate minds.

At least reimburse everybody for all the costs involving getting the old drivers license invalidated and apply for a new one. Unfortunately that will not cause to magically dissapear the rest of your harvested profile.