Let us say, as in my example, that an employee of the commissioner walks around with a USB key and captures this highly valuable information and decides to sell it. The act of capturing it, transmitting it, selling it, all of that is contrary to subsection 5(6). I simply want to know what is the sanction, what is the penalty, if any, if there is a fine, if there is jail time. You cannot create an offence without setting out a penalty, it would be declared null for lack of clarity.
So I just want to know what the basis is. I see no guarantee that this information will be kept confidential, other than an expression of intent. I see no means of enforcement to make this intent real.