Yes, or even if you can't identify who used it, you can identify that it was used, and that the political party involved didn't take the steps necessary in order to defend the database from misuse. There's nothing at all in the bill that addresses this.
One of the things that came to light during the case was that, during the election itself, Elections Canada officials started receiving complaints about voter suppression calls. They got on the phone and they talked to Mr. Hamilton, according to the ITOs, and to, I think, other people at the Conservative Party, and asked, “What's going on? We suspect that you're the source, or the party is the source, of these misdirecting calls.”
The party knew during the election that something was amiss. It's critical that steps be taken by political parties to guard their databases against misuse. There's nothing in the act that imposes that accountability.