I'm not sure whether there should be a change or not, but it's quite odd that the only thing there's a penalty for in the act is for a failure to meet a deadline. There's not a penalty for being a director in something you shouldn't have been a director in after you become a public office holder, for example. The only sanction we could impose in that situation would be if there were a failure to tell us they were a director. It's not exactly the sort of thing you'd normally do an investigation on; it's a technical requirement.
There's a middle area of contraventions that are not clearly covered by the act. It's a bit odd that the only thing I can impose a penalty on is what one might see as the most minimal of contraventions, which is a failure to meet a time delay.
That's my comment: with that substantive failure to comply, it's simply not appropriate to take the time and expense to have an investigation when it's obvious it's an infraction. Of course, even with an investigation I can report and recommend, if I want. But the only sanctions that exist on the face of the act are these penalties for failure to meet deadlines. It's a bit unusual.
On the other hand, you could argue that it's not the place of a conflict act or code to be focusing on penalties; it's more about setting the rules that people should be meeting. I'm not necessarily advocating massive fines. I'm saying it's a bit odd.