Legal basis: Civil Code of People's Republic of China (PRC).
Article 1032 Natural persons have the right to privacy. No organization or individual may infringe upon the privacy rights of others by spying, harassing, exposing or making public. Privacy is the private space, private activities and private information that natural people live in peace and don't want to be known by others.
Article 103 Unless otherwise provided by law or expressly agreed by the obligee, no organization or individual may commit the following acts: (1) Interfere with the private life and peace of life of others by means of telephone, short messages, instant messaging tools, e-mails, leaflets, etc. ; (2) Entering, taking photos or peeping into other people's private spaces such as houses and hotel rooms; (3) Shooting, peeping, eavesdropping or revealing other people's private activities; (4) Shooting or peeping at other people's private parts; (5) handling other people's private information; (6) Infringe upon the privacy of others in other ways.
Article 1034 The personal information of natural persons is protected by law. Personal information is all kinds of information recorded electronically or in other ways that can identify a specific natural person alone or in combination with other information, including natural person's name, date of birth, ID number, biometric information, address, telephone number, e-mail address, health information, whereabouts information, etc. The privacy information in personal information shall be subject to the provisions on privacy; If there are no provisions, the provisions on the protection of personal information shall apply.
Article 1035 The handling of personal information shall follow the principles of legality, justice and necessity, and shall not be over-handled, and meet the following conditions: (1) Obtain the consent of the natural person or his guardian, except as otherwise provided by laws and administrative regulations; (2) Rules for publicly handling information; (3) Clearly explain the purpose, mode and scope of information processing; (four) does not violate the provisions of laws and administrative regulations and the agreement between the two parties. The processing of personal information includes the collection, storage, use, processing, transmission, provision and disclosure of personal information.