§ 22 SächsDSG
Administrative offences and criminal provisions
(1)Any person who, contrary to the provisions of this Act or another legal provision on the protection of personal data, processes data that are not publicly known, or obtains the transmission of such data by providing false information, shall be deemed to have committed an administrative offence.
(2)The administrative offence may be punished with a fine of up to twenty-five thousand euros.
(3)The Saxon Data Protection Commissioner shall be the administrative authority within the meaning of Section 36(1)(1) of the Act on Administrative Offences in the version of the announcement of 19 February 1987 (BGBl. I p. 602), as last amended by Article 5 of the Act of 27 August 2017 (BGBl. I p. 3295), as amended from time to time.
(4)1Any person who commits one of the acts referred to in paragraph 1 for remuneration or with the intent to enrich themselves or another person or to cause damage to another person shall be punished with imprisonment of up to two years or a fine. 2The attempt shall be punishable.