The National People's Congress has passed a new law aimed at protecting user data, which will enter into force on November 1. The document regulates the norms for the activities of local companies in cyberspace and describes additional requirements for data processing.
Technology companies are required to provide secure storage of user data. This measure was a response to numerous complaints about the illegal collection and storage of information, which leads to a violation of citizens' confidentiality.
According to the new rules, the processing of personal data should have a clear and justified purpose, while it should be limited to "the minimum volume necessary to achieve the processing objectives." The document lists the conditions under which companies may collect personal information, including obtaining consent from each user. In addition, instructions are provided on the protection of data when transferring data outside the country.
Under the new law, enterprises appoint a person responsible for the protection of personal information. Companies are also obligated to conduct regular checks to ensure that data processing procedures are compliant with regulatory requirements.
Internet browsing in China is thus regulated by two main documents: the Law on the Protection of Personal Information and the Law on Data Security. The former is similar in purpose and content to the European General Data Protection Regulation ( GDPR ), while the latter sets a framework for companies to classify data based on the economic value of information, as well as its significance for China's national security. According to experts, now Chinese companies in the technology sector will have to examine in detail their methods of storing and processing data for their compliance with legal requirements.
0 Comments:
Post a Comment
Your comment and facebook share will be appreciated