Data compliance challenges from new personal information security rules

By Stephanie Wu Yuanyuan and Song Ying, AnJie Law Firm

The national standards titled Personal Information Security Specifications (GB/T 35273-2017) (the Specifications), released on 29 December 2017, are due to take effect on 1 May 2018. Being recommended national standards, the Specifications are not mandatory. However, as fundamental supporting standards under the Cybersecurity Law effective from 1 June 2017, the Specifications highlight operability by giving further guidelines on compliance with personal data protection principles under the Cybersecurity Law.

吴院渊 WU YUANYUAN 安杰律师事务所合伙人 Partner AnJie Law Firm
AnJie Law Firm

Q: What are the focuses of the Specifications?

A: The Specifications focus on all steps involved in personal information processing, including collection, preservation, use, entrusted processing, sharing, transfer and public disclosure of personal information, all subject to the personal information owner’s “consent”, which is one of the most important highlights of the Specifications.

Q: How is personal information categorized under the Specifications?

A: Categorization of personal information under the Specifications reflects data categorization requirements under Article 21 of the Cybersecurity Law. According to the Specifications, personal information includes general personal information and sensitive personal information. General personal information refers to any information identifying a specific natural person or reflecting the activities of a specific natural person. Sensitive personal information refers to any information which, if used improperly, may threaten personal or property safety or lead to discriminatory treatments or damage of personal reputation or physical or mental health.

You must be a subscribersubscribersubscribersubscriber to read this content, please subscribesubscribesubscribesubscribe today.

For group subscribers, please click here to access.
Interested in group subscription? Please contact us.



Stephanie Wu Yuanyuan and Song Ying are partners at AnJie Law Firm

AnJie Law Firm


亮马桥外交办公大楼D119 邮编: 100600

19/F Tower D1, Liangmaqiao Diplomatic Office Building, 19 Dongfang East Road

Chaoyang District, Beijing 100600, China

电话 Tel: +86 10 8567 5988

传真 Fax: +86 10 8567 5999

电子信箱 E-mail: