The draft Personal Information Protection Law of the
PRC (???????, "Draft Law") has been
made available for public consultation until November 19, 2020,
after being tabled for first reading by the Chinese legislature in
October 2020.
The 70-article Draft Law specifies various data protection
principles, including legality, transparency, accuracy, explicit
purpose, minimum necessity, data security and accountability. When
enacted, it will supplement different legislations, such as the_
Cybersecurity Law_, the recently adopted_ Civil Code_ and the newly
released Draft Data Security Law.
This article summarises some key highlights of the Draft
Law.
Key Concepts
Consistent with existing statutory definitions, "personal
information" and "handling of personal information"
are broadly defined to cast a wide net for data protection.
Personal information covers various data related to identified or
identifiable individuals, which are recorded by electronic or