If it involves the privacy of students, it is illegal.

One article is added after Article 253 of the Criminal Law as one of Article 253: "Any functionary of a state organ or financial, telecommunications, transportation, education, medical and other units who, in violation of state regulations, sells or illegally provides personal information of citizens obtained in the course of performing their duties or providing services to others, if the circumstances are serious, shall be sentenced to fixed-term imprisonment of not more than three years or criminal detention and shall also or shall only be fined. "Whoever steals or illegally obtains the above information by other means, if the circumstances are serious, shall be punished in accordance with the provisions of the preceding paragraph. However, unauthorized disclosure of other people's identity information is generally illegal and does not constitute a crime.