(1) Civil liability. The first is the liability for breach of contract. Article 107 of the Contract Law stipulates: "If a party fails to perform its contractual obligations or fails to perform its contractual obligations, it shall bear the liabilities for breach of contract such as continuing to perform, taking remedial measures or compensating for losses". There is a contractual legal relationship between banks and customers in business. Banks should follow the principle of good faith and trading habits and keep the personal information of customers confidential. In addition, most of the terms of the bank's business contracts clearly stipulate the obligation to keep customer information confidential. Therefore, the bank's act of revealing customers' personal information is a breach of contract and should bear the liability for breach of contract. The second is tort liability. Article 2 of the Tort Liability Law stipulates: "Anyone who infringes upon civil rights and interests shall bear tort liability in accordance with this Law". Article 50 of the Law on the Protection of Consumers' Rights and Interests stipulates: "If an operator infringes on the personal dignity of consumers, infringes on their personal freedom or infringes on their right to protect personal information according to law, he shall stop the infringement, restore his reputation, eliminate the influence, apologize and compensate for the losses." The bank's act of revealing customers' personal information is a violation of civil rights and interests, and it should bear the corresponding tort liability. The ways to bear the tort liability mainly include stopping the infringement, compensating the losses, apologizing, eliminating the influence and restoring the reputation. The way to bear tort liability can be applied separately or in combination.

(2) Criminal responsibility. Article 253 of China's criminal law stipulates: "In case of violation of relevant state regulations and serious circumstances, banks can become the subject of the crime of infringing citizens' personal information. In addition to the fine, the directly responsible person in charge and other directly responsible personnel shall be punished in accordance with the provisions of each paragraph.

(3) administrative responsibility. According to the provisions of Article 56 of the Law on the Protection of Consumers' Rights and Interests, if an operator infringes on the consumer's right to personal information protection according to law, in addition to bearing corresponding civil liabilities, if other relevant laws and regulations stipulate the punishment organ and punishment method, it shall be implemented in accordance with the provisions of laws and regulations; Where there are no provisions in laws and regulations, the administrative department for industry and commerce or other relevant administrative departments shall order it to make corrections, and may, according to the circumstances, give a single warning, confiscate the illegal income, impose a fine, order it to suspend business for rectification, and revoke its business license. Where a bank infringes on consumers' right to protect personal information according to law in its business activities, the banking supervision institution and the People's Bank of China may, in accordance with the provisions of relevant laws and regulations, order it to make corrections, impose administrative penalties such as warning, fine, confiscation of illegal income, order it to suspend business for rectification, revoke its financial license, or take administrative compulsory measures. According to Article 47 of the Implementation Measures of the People's Bank of China for the Protection of Financial Consumers' Rights and Interests, if a financial institution infringes on the legitimate rights and interests of financial consumers, the People's Bank of China and its branches may take the following measures: interviewing its board of directors or senior management personnel; Order it to make rectification within a time limit; Inform its superior institutions, industry supervision departments, industry insiders and society of relevant information; Punish according to the Law of People's Republic of China (PRC) on the Protection of Consumer Rights and Interests and relevant laws, administrative regulations and rules; Other measures that can be taken according to law within the scope of duties of the People's Bank of China.