The FTC issues relatively weak penalties to tech companies that break data privacy rules. A new record-breaking fine may be a chance to change that.