Description

Consultation opens on the Draft Data Regulations of the Shenzhen Special Economic Zone

On 15 July 2020, the Shenzhen Municipal Bureau of Justice published the Draft on Data Regulations of the Shenzhen Special Economic Zone for public consultation. The proposal covers data processing, data sharing and introduces requirements for data management and security. More specifically, the users will have to be informed and provide their consent for personal data processing. It introduces the right of consent withdrawal and gives users the option to refuse customized recommendations based on their profile analysis. Furthermore, entities cannot use big data analysis to list different prices, a provision added to avoid discriminatory pricing on users. Finally, the regulation introduces new restrictions on data collection and storage, as service providers will only be allowed to collect data if they have a reasonable and clear objective. Service providers will be required to delete or anonymize the data if that objective was fulfilled. In general, non-compliance can be sanctioned with a fine of up to 5% of turnover and no more than 50 million yuan. The public is invited to submit their opinions until 14 August 2020.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2020-07-15
in consultation

On 15 July 2020, the Shenzhen Municipal Bureau of Justice published the Draft on Data Regulations …

2020-08-14
processing consultation

On 14 August 2020, the public consultation on the Draft on Data Regulations of the Shenzhen Special…

2021-06-29
in grace period

On 29 June 2021, the Shenzhen Municipal People’s Congress adopted the Shenzhen Special Economic Zon…

2022-01-01
in force

On 1 January 2022, the Data Regulation of the Shenzhen Special Economic Zone becomes effective afte…

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity cross-cutting
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): data processing
personal data (all forms): data collection
personal data (all forms): storage (any form)
personal data (all forms): transfer (any destination)

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

personal data (all forms): data processing

personal data (all forms): data collection

personal data (all forms): storage (any form)

personal data (all forms): transfer (any destination)