Universities could face fines of £500,000 or 2% of their income if they are found to have failed to protect free speech.