As far as I'm aware, bypassing the firewall is not illegal, just highly discouraged.

We openly bypassed the firewall to access Google Analytics data through VPN and nobody batted an eye. China can't afford to crack down on that without scaring off pretty much every foreign company looking to do business on the mainland.