I guess the question is how will it be enforced and what would the penalties be for reporting inaccurate or outdated data?

Companies do not understand "must" unless it's accompanied by a proven threat of sanctions that outweighs the profits made by breaching the regulation. The GDPR is a good example of plenty of "musts" and theoretical fines but lax enforcement means it's always more profitable to breach it than comply.