I see no reason to cap fines to anything less than 100% of gross revenue. An egregious enough violation should kill the company (which has no inherent right to exist, BTW – being granted a corporate charter is a privilege), even if it’s the first one.