Enacted parts

ARTICLE 226-16-1-A
(Inserted by Act no.2004-801 of 6 August 2004 Article 14 Official Journal of 7 August 2004)
Where data is processed or caused to be processed in the situations mentioned in paragraphs I or II of article 24 of
the above-mentioned Act no.78-17 of 6 January 1978, and the simplified or exempted norms prescribed for these
purposes by the National Commission for Data-processing and Civil Liberties are not respected, even through
negligence, this is punished by five years' imprisonment and by a fine of €30,000.
ARTICLE 226-17
Updated 12/10/2005 - Page 58/132

---

PENAL CODE
(Ordinance No. 2000-916 of 19 September 2000 Article 3 Official Journal of 22 September into force 1 January 2002)
Carrying out or causing to be carried out the processing of personal data without putting into practice the measures
required by article 34 of the aforementioned Act no. 78-17 of 6 January 1978 is punished by five years' imprisonment
and a fine of €300,000.
ARTICLE 226-18
(Act no. 1994-548 of 1 July 1994 Article 4 Official Journal of 2 July 1994; Ordinance No. 2000-916 of 19 September
2000 Article 3 Official Journal of 22 September into force 1 January 2002; Act no.2004-801 of 6 August 2004 Article 14
Official Journal of 7 August 2004)
The collection of personal data by fraudulent, unfair or unlawful means is punished by five years' imprisonment and
a fine of €300,000.
ARTICLE 226-18-1
(Inserted by Act no.2004-801 of 6 August 2004 Article 14 Official Journal of 7 August 2004)
Carrying out or causing to be carried out the processing of personal data relating to a natural person despite this
person's objection, when the processing is done for the purpose of seeking custom, particularly commercial custom, or
when the objection is founded on legitimate reasons, is punished by five years' imprisonment and a fine of €300,000.
ARTICLE 226-19
(Ordinance No. 2000-916 of 19 September 2000 Article 3 Official Journal of 22 September into force 1 January 2002)
Except in cases provided for by law, the recording or preserving in a computerised memory, without the express
agreement of the persons concerned, of personal data which directly or indirectly reveals their racial origins, political,
philosophical or religious opinions, or trade union affiliations, or their health or sexual orientation, is punished by five
years' imprisonment and a fine of €300,000.
The same penalty applies to the recording or preserving in a computerised memory of name-bearing information
relating to offences, convictions or supervision measures outside the cases provided for by law.