The executive director or commission may impose an administrative penalty against a person who violates:
(1) a law establishing a regulatory program administered by the department; or
(2) a rule adopted or order issued by the executive director or commission.