> if the only penalty the company/agency gets

What is the penalty for the government?