by law
The original crime of illegally obtaining citizens' personal information stipulates:
People's Republic of China (PRC) Criminal Law Amendment (VII): Article 253 stipulates: "Staff of state organs and financial, telecommunications, transportation, education, medical and other units who, in violation of state regulations, sell or illegally provide citizens' personal information obtained by their units in the course of performing their duties or providing services to others, if the circumstances are serious, shall be sentenced to fixed-term imprisonment of not more than three years or criminal detention and shall also or shall only be fined. Whoever steals or illegally obtains the above information by other means, if the circumstances are serious, shall be punished in accordance with the provisions of the preceding paragraph. If a unit commits the crimes mentioned in the preceding two paragraphs, it shall be fined, and the directly responsible person in charge and other directly responsible personnel shall be punished in accordance with the provisions of each paragraph. " [2]
The crime of infringing citizens' personal information stipulates that:
People's Republic of China (PRC) Criminal Law Amendment (IX): Article 17. Article 253 of the Criminal Law is amended as: "Whoever, in violation of relevant state regulations, sells or provides personal information of citizens to others, if the circumstances are serious, shall be sentenced to fixed-term imprisonment of not more than three years or criminal detention, and shall also or only be fined; If the circumstances are especially serious, he shall be sentenced to fixed-term imprisonment of not less than three years but not more than seven years and shall also be fined.
"Whoever, in violation of the relevant provisions of the state, sells or provides personal information of citizens obtained in the course of performing duties or providing services to others shall be given a heavier punishment in accordance with the provisions of the preceding paragraph.
"Whoever steals or illegally obtains citizens' personal information by other means shall be punished in accordance with the provisions of the first paragraph.
"If a unit commits the crimes mentioned in the preceding three paragraphs, it shall be fined, and the directly responsible person in charge and other directly responsible personnel shall be punished in accordance with the provisions of each paragraph.