On 1 October 2020, the National Information Security Standardization Technical Committee's (TC260) Information Security Technology - Personal Information Security Specification was implemented. The Specification set out principles and security measures for the personal information processing activities. It sets out requirements for proper collection, storage, use, and transfer of personal information. It also sets out appropriate organisational and technical security measures.
Original source