Monetary fines for noncompliance are steep. The penalty starts at $5,000 per month and can go as high as $100,000 per month depending on how long the non-compliance lasts. The fines are associated with compliance violations and not data breaches.