Cyberbullying: Criminal and Civil Remedies for Victims

Online harassment has become one of the most prevalent forms of attacks against individuals. Legislation has adapted, but the practical implementation of legal remedies remains a matter of method and evidence. For victims, acting quickly and building a well-structured case file is often decisive.

TL;DR

• Cyberbullying is punishable under article 222-33-2-2 of the Code penal.
• Coordinated digital mob harassment (raid numerique) has been explicitly criminalized since 2018.
• Evidence relies on timestamped screenshots and formal records drawn up by a huissier de justice.
• Multiple avenues exist in parallel: criminal prosecution, civil action, delisting, and takedown under LCEN.
• Penalties are aggravated when the offense is committed through digital means.

The Legal Framework

Article 222-33-2-2 of the Code penal

Introduced by the law of August 4, 2014 and supplemented by the law of August 3, 2018, this provision penalizes:

The act of harassing a person through repeated statements or conduct whose purpose or effect is to degrade that person's living conditions, resulting in a deterioration of their physical or mental health.

Three constituent elements:

1. Repeated statements or conduct. A single isolated act does not constitute harassment.
2. A purpose or effect of degrading living conditions.
3. A deterioration of physical or mental health (material or potential element).

The Digital Mob Attack (Raid Numerique)

The same article (second paragraph) specifies, since 2018:

The offense is established even if each of the persons who made those statements or engaged in that conduct did not act repeatedly, provided that they knew those statements or conduct constituted a pattern of repetition.

This provision explicitly targets coordinated mob harassment in which each participant commits only one act but takes part in a collective, coordinated course of conduct. It represents a major step forward in protecting victims of organized raids on social media platforms.

Penalties

• Simple harassment: 1 year of imprisonment, 15,000-euro fine.
• Harassment via digital means: 2 years, 30,000 euros.
• Aggravated harassment (minor victim, particular vulnerability, intimate partner): 3 years, 45,000 euros.
• Mob harassment: specific aggravated penalties.

Other Applicable Charges

Cyberbullying is frequently accompanied by other offenses that may be prosecuted concurrently or as alternatives.

Public Insult and Defamation (Injure et diffamation publiques)

Statements published publicly on social media may constitute public insult or defamation (injure ou diffamation publique). Governed by the law of July 29, 1881, these offenses have the advantage of a shorter statute of limitations (3 months) but are subject to a specific procedural framework.

Threats

Article 222-17 of the Code penal punishes threats to commit a crime or offense against persons with 6 months of imprisonment and a 7,500-euro fine. Threats of death, assault, or rape are common in cyberbullying contexts.

Digital Identity Theft (Usurpation d'identite numerique)

Article 226-4-1 punishes with one year of imprisonment and a 15,000-euro fine the impersonation of another person or the use of identifying data online with the intent to disturb that person's peace.

Non-Consensual Intimate Image Sharing (Diffusion d'images intimes)

Article 226-2-1 punishes revenge porn with 2 years of imprisonment and a 60,000-euro fine.

Incitement to Hatred (Incitation a la haine)

Governed by the 1881 law, incitement to hatred on the grounds of origin, sex, sexual orientation, or disability is punishable by one year of imprisonment and a 45,000-euro fine.

Digital Evidence

The Timestamped Screenshot

"The reflex to develop is immediate: capture, archive, date. On social media, a message can be deleted within minutes. Without evidence, there is no case."

A screenshot must include:

• the URL of the content;
• the identifier of the sending account;
• the date and time of consultation;
• the full text of the message.

The Formal Record by a Huissier de Justice

For content likely to disappear, or for the most serious content, a formal record drawn up by a huissier de justice (a court-certified process server under French law, whose records carry irrefutable evidentiary weight) provides conclusive proof. The record must follow a precise methodology: clearing the cache, verifying the DNS settings, and capturing metadata.

Third-Party Archiving Services

Several online services allow timestamped archiving of web content (Pharos, Internet Archive). These archives can supplement the evidence but do not replace the huissier record in the most sensitive disputes.

Identifying the Perpetrators

Identifying anonymous perpetrators requires a judicial procedure. The prosecutor or investigating judge may require platforms to disclose identification data (IP addresses, connection data) under article 60-2 of the Code de procedure penale (French Code of Criminal Procedure). Hosting providers established in France or in Europe are required to respond within short timeframes.

Civil and Administrative Avenues

Emergency Injunction (Action en refere)

Article 6-I-8 of the loi pour la confiance dans l'economie numerique (LCEN, the French law on trust in the digital economy) authorizes the emergency judge (juge des referes) to order any measure appropriate to prevent or put an end to harm caused online. This expedited procedure allows for:

• content removal;
• delisting;
• an injunction against publication under penalty of a fine per day of non-compliance (astreinte).

The effectiveness of the emergency injunction lies in the speed of enforcement. A ruling can be obtained within a few days.

Delisting (Dereferencement)

The Google Spain ruling of the Court of Justice of the European Union (C-131/12, May 13, 2014) established the right to delisting. The request is submitted directly to the search engine concerned. In the event of a refusal, the CNIL (Commission nationale de l'informatique et des libertes, the French data protection authority) may be approached.

Grounds for delisting include: the excessive, inaccurate, or outdated nature of the data. The balance between the right to information and the right to privacy is assessed on a case-by-case basis.

Platform Reporting

All major platforms have implemented reporting systems (Twitter/X, Facebook, Instagram, TikTok). The European DSA (Digital Services Act) has imposed processing deadlines and a transparent framework since 2024.

Platform reporting does not preclude judicial proceedings but may accelerate the removal of the most manifestly unlawful content.

Psychological and Procedural Management

Support

Cyberbullying causes genuine psychological distress. Psychological support is often necessary in parallel with legal proceedings. Medical certificates also provide proof of the health deterioration required by the criminal definition of the offense.

Timeline

Cyberbullying litigation is by nature lengthy. Months or years may pass between filing a complaint and obtaining a judgment. Managing the psychological impact of this timeline is part of the support an attorney provides.

Additional Protection Measures

For the most exposed victims, additional measures may be considered: changing phone numbers, securing accounts, and seeking assistance from specialized services (3018, the Pharos platform for reporting unlawful content).

In Summary

Cyberbullying now has a comprehensive legal arsenal at its disposal, combining criminal law, civil law, and administrative takedown procedures. The key to success lies in rapidly assembling a strong evidence file and simultaneously mobilizing multiple legal avenues.

The firm represents victims of cyberbullying, coordinated digital mob harassment, and identity theft, working in coordination with platforms and specialized investigative services.