s.20: administrative monetary penalties (up to $1,000,000 for an individual and $10,000,000 for any other person) enforced by the CRTC; ss.13-46 cover investigations, notices of violation and undertakings.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.