Since had had legal regulation, how should maintain an unit to divulge individual information?

• 既然已经有法律规定，该如何认定单位泄露了个人信息？