If a business handling personal information (or its officer, representative or administrator if it is a corporation (including an organization without legal personality that has made provisions for a representative or manager; the same applies in Article 184, paragraph (1))), its employee, or a person who used to be that business or employee has provided or misappropriated a personal information database or the equivalent (including a personal information database or the equivalent all or part of which has been reproduced or processed) that they handled in the course of their business for the purpose of seeking their own or a third party's illegal profits, they are subject to imprisonment for not more than one year or to a fine of not more than 500,000 yen.
個人情報取扱事業者（その者が法人（法人でない団体で代表者又は管理人の定めのあるものを含む。第百八十四条第一項において同じ。）である場合にあっては、その役員、代表者又は管理人）若しくはその従業者又はこれらであった者が、その業務に関して取り扱った個人情報データベース等（その全部又は一部を複製し、又は加工したものを含む。）を自己若しくは第三者の不正な利益を図る目的で提供し、又は盗用したときは、一年以下の拘禁刑又は五十万円以下の罰金に処する。