1. Anyone who, without authorization and in a serious manner, obstructs or disrupts the operation of another person's computer system shall be punished with a prison sentence of six months to three years:
a) by carrying out any of the actions referred to in the preceding article;
b) by introducing or transmitting data; or
c) by destroying, damaging, disabling, deleting, or replacing a computer, telematics, or electronic information storage system.
If the actions have significantly harmed the normal activity of a company, business, or public administration, the sentence shall be imposed in its upper half, and may be increased to the next higher degree.
2. A prison sentence of three to eight years and a fine of three to ten times the damage caused shall be imposed when any of the circumstances of paragraph 2 of the preceding article are present in the actions referred to in the preceding section.
3. The penalties provided for in the preceding sections shall be imposed, in their respective cases, in their upper half, when the acts have been committed by means of the unlawful use of personal data of another person to facilitate access to the computer system or to gain the trust of a third party.