b) The disruption produced affects seriously or on a long-term basis a computer system
supporting an activity with critical social functions, namely supply chains, health, safety and
economic well-being of people, or the proper operation of public services.
Article 6
Illegal access
1 - Whoever, without legal permission or authorization from the owner or holder of the right
over the full system, or part thereof, accesses a computer system, shall be punishable by a
term of imprisonment up to 1 year or by fine up to 120 days.
2 - The penalty provided for in paragraph 1 shall also apply to whoever illegally produces,
sells, distributes or otherwise disseminates or introduces in computer systems devices,
programmes, or a set of executable instructions, a code or other computer data designed to
produce any of the non-authorized actions described in the preceding paragraph.
3 - Offenders shall be punishable by a term of imprisonment up to 3 years or by fine where
access is achieved through violation of security rules.
4 - Offenders shall be punishable by a term of imprisonment between 1 to 5 years where:
a) The access enables the agent to be aware of legally-protected commercial or industrial
secret information or confidential data; or
b) Considerable high-value benefits or monetary advantages are achieved.
5 - The attempt to commit the established offences shall be punishable, except for cases
provided for in paragraph 2.
6 - In the situations provided for in paragraphs 1, 3 and 5, criminal proceedings shall be
initiated on complaint.
Article 7
Illegal interception
1 - Whoever, without legal permission or authorization from the owner or holder of the right
over the full system, or part thereof, intercepts by technical means transmissions of computer
data to, from or within a computer system, shall be punishable by a term of imprisonment up
to 3 year or by fine.
2 - The attempt to commit the established offences shall be punishable.
3 - The penalty provided for in paragraph 1 shall also apply to whoever illegally produces,
sells, distributes or otherwise disseminates or introduces in computer systems devices,
programmes, or other computer data designed to produce any of the non-authorized actions
described in that paragraph.