please answer the following question that may involve your opinion and based on legal aspects of cybersecurity.

As we have begun our discussion of various sector-by-sector privacy and security laws, we have identified that some laws include a "private right of action," and others rely upon governmental agencies to enforce these statutes. With a private right of action, data subjects can sue directly, but those lawsuits are subject to due process constraints of the courts and could take years to litigate and even then there is a chance the data subject may lose. Alternatively, governmental agencies may conduct investigations that result in fines or corporate dissolution, but it is up to the discretion of the agency as to how far an investigation goes. Which method, in your opinion, creates the biggest incentive for companies to address statutory requirements