The Cyberspace Administration of China (CAC) has, for the first
time, issued legislation dedicated to protecting child privacy
online. The Regulation on Protection of Children's Personal
Information Online is due to take effect on 1 October 2019.
The Cyber Security Law (CSL) lays down general principles on
data protection in China, but there has not been any dedicated
regulation specifically on the protection of children's privacy
online until the new regulation. The Personal Information
Security Standards (Security Standards) are a set of
recommended standards for personal information protection which
took effect on 1 May 2018. These expressly require data controllers
to treat the personal information of children as sensitive personal
information and to obtain express consent from the children's
guardians for processing of personal information. The special
protection measures applicable to sensitive personal information
under the Security Standards will also apply to
