China's National Information Security Standardization
Technical Committee issued draft amendments (Amendments) to the
standards that govern the protection of personal information,
"Information Security Technology – Personal Information
Security Specification" (Standards, effective May 1, 2018) on
February 1, 2019. The Standards provide guidance on interpreting
China's Cybersecurity Law (CSL) and set out best practices for
the collection and processing of personal information in China. If
the Amendments pass, they would place the Standards among the other
strict privacy regulations in the world, such as the General Data
Protection Regulation (GDPR) and California Consumer Privacy Act
(CCPA).
