Harmful Digital Communications Act 2015, s 22(3)
If the person is convicted, they can be jailed for up to two years or fined up to $50,000. If it’s a company, it can be fined up to $200,000.