159. Anyone who(1) releases personal information in contravention of the law,
(2) identifies or attempts to identify a natural person using de-identified information without the authorization of the public body holding the information or using anonymized information,
(3) impedes the progress of an inquiry or inspection of the Commission or the hearing of an application by the Commission by providing it with false or inaccurate information, by omitting to provide information it requires or otherwise,
(4) refuses or neglects to comply, within the prescribed time, with a demand sent under section 127.1,
(5) fails to comply with an order of the Commission, or
(6) does not take the security measures necessary to ensure the protection of the personal information in accordance with section 63.1
commits an offence and is liable to a fine of $5,000 to $100,000 in the case of a natural person and of $15,000 to $150,000 in all other cases.