49 CFR 271.9: Penalties and responsibility for compliance.

(a) Any person that violates any requirement of this part or causes the violation of any such requirement is subject to a civil penalty of at least the minimum civil monetary penalty and not more than the ordinary maximum civil monetary penalty per violation, except that: Penalties may be assessed against individuals only for willful violations, and, where a grossly negligent violation or a pattern of repeated violations has created an imminent hazard of death or injury to individuals, or has caused death or injury, a penalty not to exceed the aggravated maximum civil monetary penalty per violation may be assessed. See 49 CFR part 209, appendix A. Each day a violation continues shall constitute a separate offense. Any person that knowingly and willfully falsifies a record or report required by this part may be subject to criminal penalties under 49 U.S.C. 21311. See FRA's website at https://railroads.dot.gov/for a statement of agency civil penalty policy.

(b) Although the requirements of this part are stated in terms of the duty of a railroad, when any person, including a contractor or subcontractor to a railroad, performs any function covered by this part, that person (whether or not a railroad) shall perform that function in accordance with this part.