The protections, as I mentioned, can be administered from an administrative perspective to ensure that the institutions comply, but it could be prosecuted as a criminal offence as well. People would be protected through these provisions here.
On November 5th, 2018. See this statement in context.