China: Consultation opened on Shanghai Data Regulations Draft including data protection regulation
Description
Consultation opened on Shanghai Data Regulations Draft including data protection regulation
On 30 September 2021, the Shanghai Municipal Government announced the publication of the draft Shanghai Data Regulations, at the same time opening a consultation on it. The draft Regulations lay out the conditions under which rights to data and priv…
Scope
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
executive
Government Body
central government
Complete timeline of this policy change
Hide details
2021-09-30
in consultation
2021-10-20
processing consultation
2021-11-29
adopted
Key regulatory dimensions
Regulated subjects
The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type
Private organisation
Economic activity
cross-cutting
Category
All
Policy change by business practice
The detailed activities within the scope of this policy or regulatory change.
personal data: biometric: data collection
Regulatory tool
User right to rectification of personal data
User right to deletion of personal data
User right to withdraw consent
Preventive security requirement
Regulator notification requirement
Purpose/processing limitation
User consent: Opt-in requirement
Sanctions
TBR - Existing statutory sanction
Regulated subjects
1
personal data (all forms): storage (any form)
Regulatory tool
User right to rectification of personal data
User right to deletion of personal data
User right to withdraw consent
Preventive security requirement
Regulator notification requirement
User consent: Opt-in requirement
Sanctions
TBR - Existing statutory sanction
Regulated subjects
1
personal data (all forms): data processing
Regulatory tool
User right to rectification of personal data
User right to deletion of personal data
User right to withdraw consent
Preventive security requirement
Regulator notification requirement
User consent: Opt-in requirement
Sanctions
TBR - Existing statutory sanction
Regulated subjects
1
personal data (all forms): data collection
Regulatory tool
User right to rectification of personal data
User right to deletion of personal data
User right to withdraw consent
Preventive security requirement
Regulator notification requirement
User consent: Opt-in requirement
Sanctions
TBR - Existing statutory sanction
Regulated subjects
1