(a) The administrative director may assess an administrative penalty against an insurer, self-insured employer, or third-party administrator for any of the following:

1. (1) Failure to comply with the notice of assessment issued pursuant to subdivision (c) of Section 129 within 15 days of receipt.
2. (2) Failure to pay when due the undisputed portion of an indemnity payment, the reasonable cost of medical treatment of an injured worker, or a charge or cost implementing an approved vocational rehabilitation plan.
3. (3) Failure to comply with any rule or regulation of the administrative director.

(b) The administrative director shall promulgate regulations establishing a schedule of violations and the amount of the administrative penalty to be imposed for each type of violation. The schedule shall provide for imposition of a penalty of up to one hundred dollars ($100) for each violation of the less serious type and for imposition of penalties in progressively higher amounts for the most serious types of violations to be set at up to five thousand dollars ($5,000) per violation. The administrative director is authorized to impose penalties pursuant to rules and regulations which give due consideration to the appropriateness of the penalty with respect to the following factors:

1. (1) The gravity of the violation.
2. (2) The good faith of the insurer, self-insured employer, or third-party administrator.
3. (3) The history of previous violations, if any.
4. (4) The frequency of the violations.
5. (5) Whether the audit subject has met or exceeded the profile audit review performance standard.
6. (6) Whether a full compliance audit subject has met or exceeded the full compliance audit performance standard.
7. (7) The size of the audit subject location.

(c) The administrative director shall assess penalties as follows:

1. (1) If, after a profile audit review, the administrative director determines that the profile audit subject met or exceeded the profile audit review performance standard, no penalties shall be assessed under this section, but the audit subject shall be required to pay any compensation due and penalties due under subdivision (d) of Section 4650 as provided in subdivision (c) of Section 129.
2. (2) If, after a full compliance audit, the administrative director determines that the audit subject met or exceeded the full compliance audit performance standards, penalties for unpaid or late paid compensation, but no other penalties under this section, shall be assessed. The audit subject shall be required to pay any compensation due and penalties due under subdivision (d) of Section 4650 as provided in subdivision (c) of Section 129.
3. (3) If, after a full compliance audit, the administrative director determines that the audit subject failed to meet the full compliance audit performance standards, penalties shall be assessed as provided in a full compliance audit failure penalty schedule to be adopted by the administrative director. The full compliance audit failure penalty schedule shall adjust penalty levels relative to the size of the audit location to mitigate inequality between total penalties assessed against small and large audit subjects. The penalty amounts provided in the full compliance audit failure penalty schedule for the most serious type of violations shall not be limited by subdivision (b), but in no event shall the penalty for a single violation exceed forty thousand dollars ($40,000).

(e) In addition to the penalty assessments permitted by subdivisions (a), (b), and (c), the administrative director may assess a civil penalty, not to exceed one hundred thousand dollars ($100,000), upon finding, after hearing, that an employer, insurer, or third-party administrator for an employer has knowingly committed or performed with sufficient frequency so as to indicate a general business practice any of the following:

1. (1) Induced employees to accept less than compensation due, or made it necessary for employees to resort to proceedings against the employer to secure compensation.
2. (2) Refused to comply with known and legally indisputable compensation obligations.
3. (3) Discharged or administered compensation obligations in a dishonest manner.

4. (4) Discharged or administered compensation obligations in a manner as to cause injury to the public or those dealing with the employer or insurer.

   Any employer, insurer, or third-party administrator that fails to meet the full compliance audit performance standards in two consecutive full compliance audits shall be rebuttably presumed to have engaged in a general business practice of discharging and administering its compensation obligations in a manner causing injury to those dealing with it.

   Upon a second or subsequent finding, the administrative director shall refer the matter to the Insurance Commissioner or the Director of Industrial Relations and request that a hearing be conducted to determine whether the certificate of authority, certificate of consent to self-insure, or certificate of consent to administer claims of self-insured employers, as the case may be, shall be revoked.