A concerned employee has come to executives of a company based in Mexico. He has warned that the company is not in compliance with the Federal Law on the Protection of Personal Data Possessed by Private Persons. What monetary penalties should the employee reference to show the executives that they're potentially making a very costly mistake?