There's no penalty.
The only thing I can do under the act, if I find that somebody is intentionally refusing to co-operate or refusing to provide documents, and if it looks like it's an intent to not provide access to Canadians to some documents, I can refer that to the Attorney General. As soon as it becomes more in the grey zone of criminal intent, I cannot investigate those allegations.