Article 60 5.

Member States shall ensure that the appropriate measures are taken, including administrative action or criminal proceedings in conformity with their national law, against the natural or legal persons responsible where confidentiality rules imposed by this Directive have not been respected.