e24702_SN008
Translated from French
6
Article 431-20
Apart from cases where processing is authorized under the conditions set out in the
aforementioned Law on Personal Data, anyone who processes or arranges the processing
of personal data that include the registration numbers of natural persons in the national
personal identification directory shall be punished with a prison term of one (1) to seven
(7) years and/or a fine of 500,000 to 10,000,000 francs.
Article 431-21
Anyone who processes or arranges the processing of personal data without taking the
measures set out in Article 71 of the aforementioned Law on Personal Data shall be
punished with a prison term of one (1) to seven (7) years and/or a fine of 500,000 to
10,000,000 francs.
Article 431-22
Anyone who collects personal data by fraudulent, dishonest or unlawful means shall be
punished with a prison term of one (1) to seven (7) years and/or a fine of 500,000 to
10,000,000 francs.
Article 431-23
Anyone who processes or arranges the processing of personal data relating to a natural
person in spite of an objection by that person under Article 68 of the Law on Personal
Data, where the processing is for marketing purposes, particularly commercial marketing,
or where there are legitimate grounds for the objection shall be punished with a prison
term of one (1) to seven (7) years and/or a fine of 500,000 to 10,000,000 francs.
Article 431-24
Apart from cases provided for by law, anyone who places or retains on a data medium or
in a computer memory, without the express consent of the interested party, personal data
that directly or indirectly indicate racial or ethnic origin, political, philosophical or
religious beliefs or trade-union membership, or that relate to the interested party's health
or sexual orientation shall be punished with a prison term of one (1) to seven (7) years
and/or a fine of 500,000 to 10,000,000 francs.
The provisions of the first paragraph of the present Article shall apply to non-automatic
processing of personal data, the use of which is not limited to exclusively personal
activities.
Article 431-25
Apart from cases provided for by law, anyone who places or retains on a data medium or
in a computer memory personal data relating to offenses, convictions or safety measures
shall be punished with the same penalties.
Article 431-26
Anyone who processes personal data for the purposes of health-related research shall be
punished with the same penalties if: