macropolicy

Law of the People's Republic of China on the Protection of Personal Information (effective November 1, 2021)

Articles 54 and 64: Provide the basic legal framework for personal information protection compliance audits, requiring companies to proactively fulfill their auditing obligations and cooperate with supervision.

Regulations on Network Data Security Management (effective January 1, 2025)

Article 27: To further refine the auditing requirements, network data processors shall periodically conduct compliance audits, either on their own or by commissioning professional organizations, of their handling of personal information in compliance with laws and administrative regulations.

Measures for the Management of Compliance Audits on Personal Information Protection (issued on February 14, 2025, effective May 1, 2025)

The first supporting rules for personal information protection compliance audits were formalized.

On December 16, 2023, the Ministry of Industry and Information Technology (MIIT) published a draft proposal on Friday, detailing the measures for the implementation of the "Data Security Law" and "Measures for the Management of Data Security in the Industrial and Information Technology Sector (Trial)" plan.

In order to guide and standardize personal information protection compliance audit activities, in accordance with the "Personal Information Protection Law of the People's Republic of China" and other laws and regulations, the Cyberspace Administration of China has drafted the "Personal Information Protection Compliance Audit Management Measures (Draft for Comments)", which is now submitted to Public opinion solicitation…

On January 20, the State Council Information Office held a press conference on the development of industry and information technology in 2021. Zhao Zhiguo, spokesperson of the Ministry of Industry and Information Technology and director of the Information and Communications Administration Bureau, introduced the special rectification work of APP at the press conference of the State Council Information Office. Zhao Zhiguo said that with the mobile Internet...

Abstract Data ownership and its distribution rules are unclear, which has become the biggest institutional obstacle to the development of the digital economy. To correctly discuss the issue of data ownership, we first need to clearly define the three concepts of privacy, information and data. The biggest difference between personal information and privacy is that personal information emphasizes self...