Company agrees to pay $12 million in penalties and adopted independent consultant’s recommended improvements