The service of hosting personal health data collected from natural or legal persons at the origin of the production or collection of this data or directly from the persons concerned without holding the authorisation or certificate of compliance provided for in article L. 1111-8 or processing this data without complying with the conditions of the authorisation obtained is punishable by three years’ imprisonment and a fine of 45,000 euros.