# Directive 2013/40/EU of the European Parliament and of the Council of 12 August 2013 on attacks against information systems and replacing Council Framework Decision 2005/222/JHA, Article 3: Illegal access to information systems

Extent: E+W+S+N.I.

Member States shall take the necessary measures to ensure that, when committed intentionally, the access without right, to the whole or to any part of an information system, is punishable as a criminal offence where committed by infringing a security measure, at least for cases which are not minor.

---
Source: https://www.legislation.gov.uk/eudr/2013/40/article/3 (the official version)
Page: https://openlegislation.uk/eu-directive-2013-40/article-3
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.