According to the criminal law, it is illegal to buy citizens' personal information. The purchase of citizens' personal information will also be punished. According to Article 253 of the Criminal Law of People's Republic of China (PRC), the crime of infringing citizens' personal information is an act of selling or providing citizens' personal information to others in violation of relevant state regulations. If the circumstances are serious, he shall be sentenced to fixed-term imprisonment of not more than three years or criminal detention, and shall also or only be fined. If the circumstances are especially serious, he shall be sentenced to fixed-term imprisonment of not less than three years but not more than seven years and shall also be fined. Whoever, in violation of the relevant provisions of the state, sells or provides others with personal information of citizens obtained in the course of performing their duties or providing services shall be given a heavier punishment in accordance with the provisions of the preceding paragraph. Whoever steals or illegally obtains citizens' personal information by other means shall be punished in accordance with the provisions of the first paragraph. Whoever steals or illegally obtains citizens' personal information by other means shall be punished in accordance with the provisions of the first paragraph.
Generally speaking, personal information is inviolable, and once you illegally buy or sell personal information, you will get corresponding legal punishment.