Except in cases provided for by law, transferring or causing to be transferred any personal data used or intended for use in data processing to a State not belonging to the European Community in breach of any measures taken by the National Commission for Data-processing and Civil Liberties described in article 70 of the aforementioned Act no. 78-17 of 6 January 1978 is punished by 5 years' imprisonment and a fine of €300,000.