The government doesn't get to make up fines according to how heinous they feel the offense is. Their abilities are written in stone. This is why we see larger companies get off with a pittance, because it is a pittance to them.
A great fix would be to levy fines based on annual revenue or profit, something like that. Suddenly a violation becomes real, not merely a cost of doing business.
I've been saying for years that fines for these issues need to be based on revenue, not profit, and tripled. Unless they're selling their products for a 300% profit margin, they still lose money because of the bullshit. Anything else can still be justified as a cost of business.
A bit of both, but mostly about elections. The specific act used was "Truth in Caller ID Act by maliciously spoofing the number of a prominent local political consultant."
Though, the settlements also require the company to screen calls more aggressively and implement KYC.