With the rapid development of technologies such as big data and artificial intelligence,along with the widespread use of internet applications,personal information faces increasingly severe security risks during large-scale collection and utilization. The dairy industry,especially in areas such as infant formula,involves a vast amount of consumer personal information （e.g.,identity,health status,consumption habits）and has become a high-risk field for information leakage and misuse. This not only infringes upon consumers’privacy rights but may also lead to criminal activities. As the last line of defense for safeguarding citizens’rights and interests,criminal law plays a crucial role in personal information protection. This paper took the dairy industry as the research object,analyzed the criminal law risks and regulatory gaps in its personal information processing,and proposed improvement paths from technical,legal,and corporate self-regulation perspectives to strengthen the criminal law protection mechanism for personal information in this industry.