Legal basis: Article 253 of the Criminal Law of People's Republic of China (PRC), any staff member of financial, telecommunications, transportation, education, medical and other units who, in violation of state regulations, sells or illegally provides personal information of citizens obtained by their own units in the course of performing their duties or providing services to others, if the circumstances are serious, shall be sentenced to fixed-term imprisonment of not more than three years or criminal detention and shall also or shall only be fined.
Article 19 of the Law of the People's Republic of China on Resident Identity Cards, if the staff of state organs or financial, educational and medical institutions disclose the personal information of citizens recorded in resident identity cards obtained in the course of performing their duties or providing services, which constitutes a crime, criminal responsibility shall be investigated according to law; If the case does not constitute a crime, it shall be detained by the public security organ from 10 to 15 and fined 5000 yuan. If there are illegal gains, the illegal gains shall be confiscated.