Consequences for the person doing it. If you steal a car and get caught you're going to prison on top of other problems. If you send a transaction with data hidden and get detected/rejected, you've just wasted time constructing such transaction and that's all. No prison, no fines, no destruction of reputation.