Heavy fines and the potential for data breaches can lead to public shaming of top executives and spell huge incentives for companies to outsource management of personal data.