On February 1, 2019, China's National Information
Security Standardization Technical Committee issued a set of draft
amendments ("the Amendments") to GB/T 5273-2017
Information Security Technology –Personal Information
Security Specification
(信息安全技术–个人信息安全规范)
(the "Specification") for public comments, to be provided
by March 3, 2019. The Specification took force on May 1, 2018.
The Specification is defined as a "recommended national
standard" and, as such, not legally binding. It is viewed,
however, as setting out best practices, and data controllers
typically evaluate and adjust their internal policies in relation
to the Specification.
The Amendments address, among other issues, forced consent,
third-party access and personalized display.
