The way it would be treated is the domain would be taken down (if that were requested by the victim). I'm not sure if that is EU law or something local. I am fairly certain a lot of EU countries have local provisions that effectively mean the same.