They have 90 days to "stop the abusive practices", basically meaning find a way to redesign their website - this is what they really care about.

Legal? Legal implications usually can lead to a big fine, but that already happened, so I'm not sure if there's room for follow-up.