Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 11 APRIL 2018

New Standard On Personal Information Security: A Step Forward For Personal Data Protection In China

Stefanelli & Stefanelli Studio Legale
Explore more from Stefanelli & Stefanelli Studio Legale

The year 2018 is expected to see great developments in the area of data protection, and not only across Europe.

European UnionPrivacy
Eleonora Lenzi
Eleonora Lenzi
Valentina Anna Garofano
Valentina Anna Garofano

The year 2018 is expected to see great developments in the area of data protection, and not only across Europe.

The new recommended standard 'Information Technology - Personal Information Security Specification' [GB/T 35273-2017] (hereinafter 'the Specification') will finally come into effect in China on May 1, 2018. The Specification follows the route taken last year with the entry into force of the China Cybersecurity Law 2016 by providing detailed guidance for compliance in data processing activities including the collection, retention, use, sharing and transfer of personal information.

The Specification applies to any private or public organization that has the power to decide the purpose and method of processing personal information; this seems to be modelled on the concept of 'data controller' under the European GDPR.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Pseudonymised, Not Anonymous: What The Italian Garante’s €7 Million IQVIA Fine Means For Health Data

The Italian data protection authority fined IQVIA Solutions Italy €7 million for treating patient records as anonymous when they were actually pseudonymised personal data subject to GDPR. This decision demonstrates regulators' strict interpretation of what constitutes personal data, even as the EU considers narrowing this definition through the Digital Omnibus reforms.
GlobalPrivacy
Arnold & Porter
Arnold & Porter
Article

Tracking Pixels In Emails: The Garante’s New Guidelines And Requirements For Businesses

The Italian Data Protection Authority has issued comprehensive guidelines on tracking pixels in email communications, establishing strict transparency and consent requirements for both public and private entities. Organizations now face a six-month compliance deadline to overhaul their email marketing practices, update privacy notices, and implement granular consent mechanisms for these invisible tracking tools.
ItalyPrivacy
A&O Shearman
A&O Shearman