While enforcement varies by country, individuals can face penalties ranging from cease-and-desist letters from their Internet Service Provider (ISP) to substantial fines .