Legal basis: Article 253 of the Criminal Law, staff of state organs or staff of financial, telecommunications, transportation, education, medical and other units. Whoever, in violation of state regulations, sells or illegally provides personal information of citizens obtained by the unit in the course of performing its duties or providing services to others, if the circumstances are serious, shall be sentenced to fixed-term imprisonment of not more than three years or criminal detention and shall also or only be fined.