Firms fined $75k for personal data lapses