Some of the rest of the world is doing more than that. The main "thing" that's coming down the road to perturb Elon Musk's vision of Twitter: the EU's rules on data protection.
Meta is in the barrel on that right now, on a number of cases with more in the pipeline. Wait until they get around to Elon's new hellscape, which he has proposed to run on a quarter of the staff it had when he bought it. It's not like he left compliance and security offices for last. They were among the first to get decimated.
The penalty is for a 2021 data breach, where more than half a million records of people’s personal information surfaced on a public forum.
www.politico.eu
Aside from Ireland's actions v Meta, Twitter was already fined around half a million dollars in 2020 by Ireland's Data Protection Commissioner, after a bug in the Android version of the app had made public some protected tweets in 2018, and after a two-year investigation with all due consideration of any mitigating circumstances.
In the fine print of that
188-page decision (pdf) by the Irish commissioner, she highlighted for attention a particular section of the EU's GDPR (General Data Protection Regulation). That section may in future have augmenting effects on fines imposed for whatever violations Musk created for himself with respect to decimating the management and staffing of Twitter groups responsible for data protection.
Of course Musk's counsel could argue that Dorsey and not Musk caused the prior situation. But to me it sounds like that might get him about a dollar and a half off whatever humongous fines could be imposed. Somewhere in the EU rules it lays out fines which can run to €30m or 4% of global turnover, whichever is HIGHER... so it won't help Musk that he's not making money off his broken toy.