The penalty for violating SEC regulations can vary depending on the nature and severity of the violation. The Securities and Exchange Commission (SEC) has the authority to impose civil and criminal penalties, as well as other sanctions such as fines. The SEC fined Morgan Stanley in 2016 for not protecting customer PII and fined the bank USD $35 million.