China: Implemented Administrative Measures for Credit Investigation Services including data protection regulation

On 1 January 2022, the “Administrative Measures for Credit Investigation Services” of the People's Bank of China entered into force. The Administrative Measures outlines the requirements for the collection, processing, and use of credit information. The measures provide that the collection of personal credit information should be done with the consent of the data subject, follow the principle of necessity, and should not be collected excessively. Credit reporting businesses and related activities are required to protect the legitimate rights and interests of data subjects, implement data security systems, and prevent the misuse of personal information, among others. In addition to the rights set out in the Personal Information Protection Law, data subjects have the right to obtain their own credit reports for free twice a year, the right to object, and to complain.