Member States shall ensure that the appropriate measuresare taken, including administrative action or criminal proceedingsin conformity with their national law, against the natural or legalpersons responsible where confidentiality rules imposed by thisDirective have not been respected.
Source
