From next year, penalties will increase from $2m to the highest of a $10m fine, 10 percent of a company's turnover or three times the gain made from the breach.