Information leakage is mainly manifested in personal privacy leakage, spam messages, emails, telephone harassment, online fraud harassment, personal information abuse and so on. In violation of the relevant provisions of the state, if the circumstances are serious, he shall be sentenced to fixed-term imprisonment of not more than three years or criminal detention, and shall also or only be fined; If the circumstances are especially serious, he shall be sentenced to fixed-term imprisonment of not less than three years but not more than seven years and shall also be fined. Whoever, in violation of the relevant provisions of the state, sells or provides personal information of citizens obtained in the course of performing his duties or providing services to others shall be given a heavier punishment in accordance with the provisions of the preceding paragraph, and whoever steals or illegally obtains personal information of citizens by other means shall be punished in accordance with the provisions of the first paragraph. Where a unit commits the crimes mentioned in the preceding three paragraphs, it shall be fined, and the persons who are directly in charge and other persons who are directly responsible shall be punished in accordance with the provisions of the preceding three paragraphs.
legal ground
Article 286 of the Criminal Law of People's Republic of China (PRC), who, in violation of state regulations, deletes, modifies, adds or interferes with the functions of the computer information system, thus causing the computer information system to fail to operate normally and the consequences are serious, shall be sentenced to fixed-term imprisonment of not more than five years or criminal detention; If the consequences are especially serious, they shall be sentenced to fixed-term imprisonment of not less than five years. Whoever, in violation of state regulations, deletes, modifies or adds data and applications stored, processed and transmitted in the computer information system, with serious consequences, shall be punished in accordance with the provisions of the preceding paragraph. Whoever intentionally produces and spreads destructive programs such as computer viruses, which affects the normal operation of computer systems and causes serious consequences, shall be punished in accordance with the provisions of the first paragraph. Where a unit commits the crimes mentioned in the preceding three paragraphs, it shall be fined, and the persons who are directly in charge and other persons who are directly responsible shall be punished in accordance with the provisions of the first paragraph. Article 286-1 A network service provider who fails to perform the obligations of information network security management stipulated by laws and administrative regulations and refuses to make corrections after being ordered by the regulatory authorities shall be sentenced to fixed-term imprisonment of not more than three years, criminal detention or public surveillance under any of the following circumstances, and shall also, or shall only, be fined: (1) Causing a large number of illegal information to be disseminated; (2) Causing the disclosure of user information and causing serious consequences; (3) Causing the loss of evidence in criminal cases, and the circumstances are serious; (4) There are other serious circumstances. If a unit commits the crime mentioned in the preceding paragraph, it shall be fined, and the directly responsible person in charge and other directly responsible personnel shall be punished in accordance with the provisions of the preceding paragraph. Whoever commits the acts mentioned in the preceding two paragraphs and constitutes other crimes at the same time shall be convicted and punished in accordance with the provisions of heavier punishment.