Consequences for the person doing it.
If you steal a car and get caught you're going to prison on top of other problems.
If you send a transaction with data hidden and get detected/rejected, you've just wasted time constructing such transaction and that's all. No prison, no fines, no destruction of reputation.