Any person who has entered into a contract or agreement with the Department of Energy, or a subcontract or subagreement thereto, and who violates (or whose employee violates) any applicable rule, regulation, or order prescribed or otherwise issued by the Secretary pursuant to this chapter relating to the safeguarding or security of Restricted Data or other classified or sensitive information shall be subject to a civil penalty of not to exceed $100,000 for each such violation.