§ 19 LDSG SH
Administrative fines, criminal provision
(1)No administrative fines shall be imposed on authorities or other public bodies within the meaning of § 2(1) and (2).
(2)Any person who, in violation of the provisions of this Act or of another legal provision on the protection of personal data, processes personal data that are not publicly known, 1. without being authorised to do so, or 2. obtains such data by fraudulent misrepresentation, and in doing so acts for remuneration or with the intention of enriching himself or herself or another person or of causing harm to another person, shall be punished with imprisonment for a term not exceeding two years or with a fine.
(3)The offence shall be prosecuted only upon application. The data subject, the controller, the processor and the Land Commissioner shall be entitled to file such an application.
(4)Attempt shall be punishable.