Data compliance challenges from new personal information security rules

By Stephanie Wu Yuanyuan and Song Ying, AnJie Law Firm
0
2634

The national standards titled Personal Information Security Specifications (GB/T 35273-2017) (the Specifications), released on 29 December 2017, are due to take effect on 1 May 2018. Being recommended national standards, the Specifications are not mandatory. However, as fundamental supporting standards under the Cybersecurity Law effective from 1 June 2017, the Specifications highlight operability by giving further guidelines on compliance with personal data protection principles under the Cybersecurity Law.

吴院渊 WU YUANYUAN 安杰律师事务所合伙人 Partner AnJie Law Firm
吴院渊
WU YUANYUAN
安杰律师事务所合伙人
Partner
AnJie Law Firm

Q: What are the focuses of the Specifications?

A: The Specifications focus on all steps involved in personal information processing, including collection, preservation, use, entrusted processing, sharing, transfer and public disclosure of personal information, all subject to the personal information owner’s “consent”, which is one of the most important highlights of the Specifications.

Q: How is personal information categorized under the Specifications?

A: Categorization of personal information under the Specifications reflects data categorization requirements under Article 21 of the Cybersecurity Law. According to the Specifications, personal information includes general personal information and sensitive personal information. General personal information refers to any information identifying a specific natural person or reflecting the activities of a specific natural person. Sensitive personal information refers to any information which, if used improperly, may threaten personal or property safety or lead to discriminatory treatments or damage of personal reputation or physical or mental health.

You must be a subscribersubscribersubscribersubscriber to read this content, please subscribesubscribesubscribesubscribe today.

For group subscribers, please click here to access.
Interested in group subscription? Please contact us.

你需要登录去解锁本文内容。欢迎注册账号。如果想阅读月刊所有文章,欢迎成为我们的订阅会员成为我们的订阅会员

已有集团订阅,可点击此处继续浏览。
如对集团订阅感兴趣,请联络我们

Stephanie Wu Yuanyuan and Song Ying are partners at AnJie Law Firm

AnJie Law Firm

北京市朝阳区东方东路19号院5号楼

亮马桥外交办公大楼D119 邮编: 100600

19/F Tower D1, Liangmaqiao Diplomatic Office Building, 19 Dongfang East Road

Chaoyang District, Beijing 100600, China

电话 Tel: +86 10 8567 5988

传真 Fax: +86 10 8567 5999

电子信箱 E-mail:

wuyuanyuan@anjielaw.com

songying@anjielaw.com

www.anjielaw.com