- Effective on 1 November 2021
- Separate consent by individuals required for sensitive
information
First Personal Information Protection Law in China
The Personal Information Protection Law (PIPL) was passed in
China on 20 August 2021 and will come into force from 1 November
2021. It is specified, among the rest, that automated
decision-making methods to push information and direct commercial
marketing to individuals shall provide options that are not
specific to their personal characteristics or provide individuals
with convenient means to refuse. Separate consent shall be obtained
from individual when processing sensitive personal information
relating to biometrics, medical and health, financial accounts and
location tracking. Applications that illegally process personal
information shall be ordered to suspend or stop providing
services.
