Chapter V: Criminal provisions

The service of hosting personal health data collected from natural or legal persons at the origin of the production or collection of this data or directly from the persons concerned without holding the authorisation or certificate of compliance provided for in article L. 1111-8 or processing this data without complying with the conditions of the authorisation obtained is punishable by three years’ imprisonment and a fine of 45,000 euros.

Legal entities declared to be criminally liable, under the conditions set out inarticle 121-2 of the French Criminal Code, for the offences defined in article L. 1115-1 shall incur, in addition to the fine set out in article 131-38 of the French Criminal Code, the penalties set out in 2°, 3°, 4°, 5° and 9° of article 131-39 of the same code. The ban imposed in this respect relates to…

Drawing up a certificate in breach of article L. 1110-2-1 is punishable by one year’s imprisonment and a fine of 15,000 euros.