China: Published Administrative Measures for Credit Investigation Services including data protection regulation

On 27 September 2021, the People's Bank of China published the “Administrative Measures for Credit Investigation Services” establishing the requirements for the collection, processing, and use of credit information. The measures provide that the collection of personal credit information should be done with the consent of the data subject, follow the principle of necessity, and should not be collected excessively. Credit reporting businesses and related activities are required to protect the legitimate rights and interests of data subjects, implement data security systems, and prevent the misuse of personal information, among others. In addition to the rights set out in the Personal Information Protection Law, data subjects have the right to obtain their own credit reports for free twice a year, the right to object, and to complain.