China: Adopted Information Security Technology - Personal Information Security Specification

On 6 March 2020, the National Information Security Standardization Technical Committee's (TC260) Information Security Technology - Personal Information Security Specification was adopted, to be implemented on 1 October 2020. The Specification set out principles and security measures for the personal information processing activities. It sets out requirements for proper collection, storage, use, and transfer of personal information. It also sets out appropriate organisational and technical security measures.