Processing data or causing data to be processed where the data concerned is of a personal nature, without respecting the formalities required by statute prior to the processing of such data, is punished by five years' imprisonment and a fine of €300,000, even where committed through negligence. The same penalties apply to processing of data or causing data to be processed that has been subject to one of the measures provided for in 2° of I of article 45 of Act no. 78-17 of 6 January 1978 regulating information technology, files and liberty, even where this is committed through negligence.