There is only civil liability for noncompliance, in the form of massive fines. However there is 5-year imprisonment for people who disclose information about these notices though (unless it follows the aggregated statistics requirements).