Technology companies face fines of up to $32.5mn for systemic breaches