exceeding one year and a fine not less than OMR five hundred and not exceeding OMR one thousand or by either penalty . If the data and information provided for in the second paragraph above is personal then the penalty shall be imprisonment for a period not less than one year and not exceeding three years and a fine not less than OMR one thousand and not exceeding OMR three thousand or by either penalty. Article (4) The penalty with imprisonment for a period not less than one year and not exceeding three years and a fine not less than OMR one thousand and not exceeding OMR three thousands or by either penalty, shall be applied to any person who commit any of the offences mentioned in article (3) of this law, during and when performing his official duties. Article (5) The penalty with imprisonment for a period not less than one month and not exceeding three years and a fine not less than OMR one thousand and not exceeding OMR ten thousand shall be applied to any person who changes or alters or amends or intentionally or illegally destroys by using information technology tools, data or electronic information related to medical report or diagnosis or treatment or medical care saved in an informational system or information technology tools. Article (6) The penalty with imprisonment for a period not less than one year and not exceeding three years and a fine not less than OMR one thousand and not exceeding OMR three thousand or by either penalty, shall be applied to any person who intentionally and illegally have access to an electronic site or to an informational system with the intent to obtain data or governmental electronic information of confidential nature or by virtue of orders issued in this regard. The punishment with imprisonment for not less than three years and not exceeding ten years and a fine not less than OMR three thousands and not exceeding OMR ten thousands, shall be applied if the criminal act resulted in the deletion or change or amendment or disfiguration or destruction of or copying or damage or dissemination of data or electronic information. The confidential data and electronic information of the banks and the financial institutions are regarded as governmental confidential data and electronic information in the application of this article. Article (7) The penalty with imprisonment for a period not less than one month and not exceeding one year and a fine not less than OMR one thousand and not exceeding OMR three thousand or by either penalty, shall be applied to any person who 4