Art. 34 provides that the CNIL, by ordinance, may establish minimum standards for the technical security of processing operations referred to in Art. 8 II 2°and 6° (lifesaving and health data and data of persons entrusted with confidential information by law or profession), which fall under Art. 226-13 of the French penal code.