The "Samuel Paty" law: when French law makes the broadcaster responsible for doxxing

La loi « Samuel Paty »

On October 16, 2020, the assassination of Samuel Paty marked a turning point. For the first time, French society collectively realized that online violence is not limited to words, but that it can kill. Before the act itself, there was a pattern well known to cyberbullying specialists: ostracism, public shaming, targeted dissemination of personal information, and then escalation.

This tragedy has triggered an exceptional legislative response. A response that breaks with a passive view of responsibility on the internet. A law that targets not only the initial perpetrator, but the entire distribution chain. A French law, rare in Europe, that finally recognizes that relaying, amplifying, or hosting such content can lead to criminal liability.

1. Doxxing: what are we really talking about?

The term doxxing comes from “dropping documents.” It refers to the act of publicly disclosing or disseminating personal information about a person with the intent to harm them. This can include an address, phone number, workplace, family information, a photograph, or even administrative documents.

Contrary to popular belief, doxxing does not necessarily require that the information be secret. Its reuse, contextualization, and malicious dissemination are sufficient. The danger lies not only in the data itself, but also in the intent and the consequences.

Before 2021, French law addressed doxxing in a fragmented way: invasion of privacy, threats, harassment, sometimes endangerment. But no offense directly targeted the act of disseminating personal information to expose someone to risk .

2. The Samuel Paty case: a legal shock

In the case of Samuel Paty, the facts are now established: before the assassination, his name, his school, and contextual information circulated on social media. People relayed, commented on, and shared this information, sometimes without considering the impact of their actions.

It's not just the final author who is at fault. It's the distribution ecosystem . French law has drawn a clear conclusion: digital amplification is a responsibility .

It is in this context that a new, specific offence is created, explicitly targeting the dissemination of personal information with the intent to cause harm.

3. The central text: Article 223-1-1-2 of the Penal Code

The key provision comes from Law No. 2021-646 of May 25, 2021 for global security preserving freedoms , supplemented and reinforced by Law No. 2021-1109 of August 24, 2021 consolidating respect for the principles of the Republic .

It introduces Article 223-1-1-2 of the Penal Code , which states:

"Disclosing, disseminating, or transmitting, by any means whatsoever, information relating to a person's private, family, or professional life that allows them to be identified or located, with the aim of exposing them or their family members to a direct risk of harm to themselves or their property, is punishable by three years' imprisonment and a fine of €45,000."

When the victim is a person holding public authority, a teacher or a public official, the penalties are increased to five years imprisonment and a fine of 75,000 euros .

This text is fundamental because it radically changes the legal logic.

4. A law that is exceptional in its scope of application

This offence is exceptional in several respects.

First, it is not limited to the original author of the publication. The text targets “the act of disclosing, disseminating, or transmitting, by any means whatsoever .” This includes:

• the republication,

• sharing,

• the quote,

• repost,

• the retweet,

• the relay within a group or channel,

• algorithmic promotion.

👉 French law recognizes that relaying information is an act of support.

Furthermore, the concept of “dissemination” is intentionally broad. It covers both a public post and a message sent in a closed group, as long as exposure to risk is characterized.

5. Intent and risk: the heart of the offense

The law does not penalize all dissemination of information. It targets a specific situation: that where the dissemination is done with the aim of exposing the person to a risk .

This risk could be:

• physical,

• material,

• psychological,

• or linked to credible threats.

It is not necessary for the harm to occur. The risk is sufficient . This is an offense of endangering others, similar in spirit to Article 223-1 of the Penal Code.

This point is crucial for victims of cyberbullying: they do not have to wait for a tragedy to occur before taking action.

6. The broadcaster's responsibility: a major break

The major innovation of the so-called “Samuel Paty” law is the explicit recognition of the broadcaster’s responsibility , in the broadest sense.

In French law, this concept is linked to the LCEN (Law No. 2004-575 of 21 June 2004 on Confidence in the Digital Economy) , which distinguishes:

• the publisher,

• the hosting provider,

• technical intermediaries.

But here, the Penal Code goes beyond this classic distinction. Anyone who voluntarily contributes to the dissemination can be held criminally liable , even without being the originator of the content.

A retweet is no longer neutral. A quote is no longer innocuous. A militant "follow" accompanied by a targeted report can become problematic.

7. Technical service providers and hosting providers: the end of passive irresponsibility

The law does not abolish the limited liability regime for hosting providers, but it tightens it considerably .

A hosting provider or platform that:

• is alerted,

• includes the risk,

• intentionally leaves the content accessible.

may have his liability engaged, in particular on the grounds of complicity (articles 121-6 and 121-7 of the Penal Code).

Article 6.I.2 of the LCEN (Law for Confidence in the Digital Economy) already mandates the prompt removal of manifestly illegal content upon becoming aware of it. The Samuel Paty Law reinforces the seriousness of what is at stake: the integrity of individuals .

8. A law designed for victims, not for censorship

Contrary to some criticisms, this law does not create a thought police. It does not target opinions, but dangerous labeling mechanisms .

Freedom of expression remains protected by:

• Article 11 of the Declaration of the Rights of Man and of the Citizen,

• Article 10 of the European Convention on Human Rights.

But the European Court of Human Rights consistently reiterates that freedom of expression does not protect incitement to violence or the endangerment of others .

The Samuel Paty law is fully in line with this jurisprudence.

9. A powerful legal tool against organized cyberbullying

In cases of cyberbullying, doxxing is often a first step. Once the information is spread, the online mob takes care of the rest.

This text finally allows:

• to trace the distribution chain back,

• to empower the intermediaries,

• to stop the runaway trend before it becomes irreversible.

It is no longer just a matter of removing content, but of setting a clear legal limit .

10. A French law, but a European signal

Although this law is specifically French, it is closely watched by other European states. Few countries have dared to go so far in recognizing the broadcaster's responsibility.

In a context where European law (DSA, GDPR) strengthens the accountability of digital actors, the Samuel Paty law appears as a legal laboratory , focused on human protection.

11. How is the "Samuel Paty" law a decisive tool for victims of harassment?

For victims of cyberbullying, the so-called "Samuel Paty" law represents a profound paradigm shift. Until then, online harassment was often treated as a series of isolated incidents: a message, a tweet, a post, sometimes a threat. This legal fragmentation made defending oneself complex, slow, and often discouraging.

The strength of this law lies in its recognition of doxxing as a structural element of harassment , not merely collateral damage. It addresses the pivotal moment when harassment changes its nature: when anonymity disappears, when the person is singled out, located, and exposed.

In many cases, it is not the insult itself that destroys a victim, but the public exposure : address revealed, workplace targeted, family mentioned, personal photographs unearthed. The law now allows this critical stage to be criminalized, even in the absence of physical assault or any act of violence.

For a victim, this is essential: they no longer have to wait for the worst to happen to be protected .

12. A response tailored to the real-world mechanics of cyberbullying

Modern cyberbullying is rarely the work of a single person. It is based on:

• implicit or explicit appeals,

• successive relays,

• group dynamics,

• algorithmic amplification.

The Samuel Paty law finally takes this reality into account. It allows for targeting not only the initial perpetrator, but also subsequent disseminators , as long as the dissemination contributes to exposing the victim to risk.

For a victim of harassment, this means that:

• A "simple retweet" is no longer legally neutral.

• Republishing already problematic content can lead to liability.

• The "I'm just quoting" argument loses its relevance.

This approach is particularly effective against organized harassment campaigns, where everyone thinks they can dilute their responsibility in the crowd.

13. How can a victim concretely invoke the Samuel Paty law?

The law can be used at several levels, including before any criminal proceedings , as a tool for legitimate legal pressure.

When personal information is shared in a hostile context, the victim may:

• to legally classify the facts,

• alerting the platforms with a clear legal basis

• demand the immediate removal of the content.

Simply mentioning Article 223-1-1-2 of the Penal Code in a report often radically changes the reaction of technical intermediaries. Where a generic report might be ignored, a report specifically classified as a criminal offense requires heightened vigilance .

The victim is no longer making a moral claim, but is now raising a legal alarm.

14. A powerful tool to demand the swift removal of content

The Samuel Paty law is particularly effective when combined with the LCEN .

Article 6.I.2 of the LCEN requires hosting providers to promptly remove manifestly illegal content as soon as they become aware of it. The dissemination of personal information that exposes someone to a clearly defined criminal risk falls squarely into this category.

For a victim, this allows them to:

• formally notify a hosting provider or platform,

• demonstrate the manifestly unlawful nature of the content,

• to hold the broadcaster liable in case of inaction.

From the moment the platform is informed of the risk, inaction becomes a fault , and potentially complicity.

15. Identifying the spreaders: an often underestimated weapon

One of the major contributions of this law is that it allows victims to no longer focus solely on the initial perpetrator , often anonymous or out of reach, but to take an interest in the visible intermediaries.

In many cases, the diffusers are:

• identifiable accounts,

• sometimes public figures,

• sometimes group or page administrators,

• sometimes actors are aware of the impact of their publications.

The law serves as a reminder of a simple reality: one can be criminally responsible without being the originator of the content .

For victims, it is often a way to quickly stop a harassment campaign, because the perpetrators are identifiable and sensitive to legal risk.

16. The law as a tool for prevention, not just repression

It is important to emphasize that the Samuel Paty law is not solely intended to punish after the fact. It has a very strong deterrent function .

When a victim:

• legally characterizes the facts

• demonstrates that dissemination exposes him to a risk,

• reminds us of the criminal liability of broadcasters.

The climate is changing. Relays are hesitant. Platforms are reacting faster.

The initial enthusiasm is waning.

In many cases, clearly invoking this law makes it possible to avoid escalation , without even going so far as filing a complaint.

17. Interaction with other legal tools available to victims

The Samuel Paty law does not replace other texts: it complements them.

For a victim of harassment, it naturally connects with:

• the GDPR (personal data, right to erasure),

• the LCEN (responsibility of hosting providers),

• the Penal Code (harassment – article 222-33-2-2-2),

• the right to one's image,

• Platform reporting procedures.

This cumulative approach is essential. It allows us to make an impact on several levels : content, distribution, visibility, responsibility.

18. Empowering victims of digital violence

For a long time, victims of cyberbullying felt alone against online mobs, opaque platforms, and endless legal proceedings. The Samuel Paty Law marks a symbolic and legal turning point: it recognizes that online violence is a real, immediate, and serious risk .

It gives victims a clear legal language to name what they are suffering. It transforms the status of the victim: from a passive target, she becomes an active participant in her own protection .

To disseminate is to take action

The so-called “Samuel Paty” law marks a profound break in the way the law approaches the Internet. It enshrines a simple but powerful idea: digital violence is collective, therefore responsibility can also be collective .

In the age of social media, one can no longer claim to be a mere spectator. Sharing, quoting, relaying, amplifying—these are actions. And when these actions expose a person to danger, French law now provides a clear response.

For victims of doxxing and cyberbullying, this law is not symbolic. It is a legal shield , conceived from a real tragedy, to prevent it from happening again.