Information-reporting penalty safe harbor finalized