China passes new personal data privacy law, to take effect Nov. 1
SHANGHAI, Aug 20 (Reuters) - China's National People's Congress on Friday passed a law designed to protect online user data privacy and will implement the policy from Nov. 1, according to state media outlet Xinhua.
The law's passage completes another pillar in the country's efforts to regulate cyberspace and is expected to add more compliance requirements for companies in the country.
China has instructed its tech giants to ensure better secure storage of user data, amid public complaints about mismanagement and misuse which have resulted in user privacy violations.
The law states that handling of personal information must have clear and reasonable purpose and shall be limited to the "minimum scope necessary to achieve the goals of handling" data.
It also lays out conditions for which companies can collect personal data, including obtaining an individual's consent, as well as laying out guidelines for ensuring data protection when data is transferred outside the country.
The law further calls for handlers of personal information to designate an individual in charge of personal information protection, and for handlers to conduct periodic audits to ensure compliance with the law.
The second draft of the Personal Information Protection law was released publicly in late April. ...
On Tuesday, China's State Administration for Market Regulation (SAMR) passed a sweeping set of rules aimed at improving fair competition, banning practices such as fake online reviews.
In January, the government-backed China Consumers Association issued a statement criticizing tech companies for "bullying" consumers into making purchases and promotions. ...
See the full story here: https://www.reuters.com/world/china/china-passes-new-personal-data-privacy-law-take-effect-nov-1-2021-08-20/
