§ 23 DSG M-V
Criminal offences
(1)Any person who commits one of the acts referred to in Section 22(1) for remuneration or with the intent to enrich themselves or another person or to cause damage to another person shall be punished with imprisonment of up to 2 years or a fine.
(2)The offence shall only be prosecuted upon complaint. Those entitled to file a complaint shall be the data subject, the controller, the processor or processors, and the supervisory authority.