Anyone holding personal data at the time of its recording, classification, transmission or any other form of processing who diverts this information from its proper purpose, as defined by the legislative provision or regulation or decision of the National Commission for Data-processing and Civil Liberties authorising automated processing, or by the preliminary statement made before the implementation of such processing, is punished by five years' imprisonment and a fine of €300,000.