None of those organizations are OpenAI, which has yet to establish a history of dishonest dealing. It's not usually a good idea for government agencies to assume that every company in a particular field is maximally dishonest and criminally inclined.
The goal is compliance, not punishment. So it's better to give them a chance to comply, a warning, and then prosecute and fine if they continue to flout the rules.