Using And Disclosing Personal Information In China – Do's And Don't

Unlawful usage and disclosure of personal information in China can result in administrative penalties and in serious cases, criminal offences. The Personal Information Protection Law ('PIPL'), the Personal Information Security Specification ('Specification') and Guide to Security Protection of Personal Information Online ('Guide') adopted on 1 November 2021, 6 March 2020, and April 10, 2019, respectively, form the legal framework regulating personal information usage and disclosure in China. Under the Laws, companies collecting data on individuals located in China are required to adopt measures to reduce mitigate unethical personal information disclosure and protect users from infringement.