Legal Ways to Manage Sensitive Personal Information in China

China’s Personal Information Protection Law imposes stricter regulations on sensitive personal information compared to general data. Companies handling such data must adhere to stricter requirements for consent, data protection, and cross-border transfers. The law aims to protect personal data such as biometrics and location to ensure safety and dignity. Current regulations are limited, but draft standards may be adopted soon.

Under China’s personal information protection regulations, sensitive personal information is subject to a higher standard of protection requirements than those imposed for general data. Companies collecting, storing, processing, and transferring sensitive personal data must comply with strict requirements on informed consent, data protection mechanisms, and clearance mechanisms for cross-border data transfer. We explain the scope of sensitive personal information in China and discuss the core compliance requirements in current and upcoming regulations.

Under China’s Personal Information Protection Law (PIPL), sensitive personal information is subject to much stricter processing rules than general personal information. Sensitive personal information includes personal data such as biometrics or geographical location, which, if leaked, has the risk of harming the safety and dignity of the owner of the personal information.

In this article, we summarize the requirements for protecting, processing, and exporting sensitive personal information in China. As current in-force regulations do not yet provide a comprehensive framework for the requirements for handling sensitive personal information, we also look at draft standards that may be adopted in the near future.

This article is republished from China Briefing. Read the rest of the original article.

China Briefing is written and produced by Dezan Shira & Associates. The practice assists foreign investors into China and has done since 1992 through offices in Beijing, Tianjin, Dalian, Qingdao, Shanghai, Hangzhou, Ningbo, Suzhou, Guangzhou, Dongguan, Zhongshan, Shenzhen, and Hong Kong. Please contact the firm for assistance in China at china@dezshira.com.