I do not know whether criminal sanctions would be employed in that particular case but I know that the disciplinary measures can go as far as fining, demotion or even being sacked, if that is appropriate. They have their internal review processes, depending on the breach involved.
No comments