I think businesses that are flagrant abusers and violators of privacy rights should have their names published. Publishing the names would shame them into compliance, one would hope. They would become media stories, and then that would sort of tie into the question raised previously: how do you increase awareness and consumer education?
If people can be cloaked in anonymity, then yes, of course consumers aren't going to understand their privacy rights and the law. So this is one way of bringing their rights to their attention. Name names. Let's not treat offending organizations with kid gloves.