The penalty definitely needs to be steeper. Companies this big see $1.5 million penalty as just “business costs”. It doesn’t act as a deterrent. I think it should be steep enough for GoodRx and other companies to think 10 times before doing this kind of shady stuff.
As with class action suites, big companies have armies of lawyers to fight such cases for ages and ultimately the victims tend to settle for less because they can’t afford to fight forever.