China: Implemented Zhejiang Province Automobile Data Processing Management Regulations including data protection regulation

On 1 November 2023, the Zhejiang Cyberspace Administration implemented the Zhejiang Province Automobile Data Processing Management Regulations, including data protection regulations. The Regulations set out that automobile data processors should generally inform data subjects prior to processing their personal information and obtain their contains, and that they must obtain separate consent from the data subject for each category of sensitive information and cannot obtain consent for several sensitive information simultaneously. Personal information in out-of-car image and video data should be anonymised, cabin data should not be collected by default, and ongoing collection of sensitive personal information should be indicated by flashing. The Regulations also set out further collection and storage requirements for automobile data processors and mandate that users must be able to access, copy, and delete personal information.