Failure to comply with the EU Cyber Resilience Act's Article 14 reporting requirements carries administrative fines of up to €15 million or 2.5% of a company's global annual turnover, whichever is higher