China: Launched 2025 joint enforcement campaign on personal information protection

On 28 March 2025, the Cyberspace Administration of China, the Ministry of Industry and Information Technology, the Ministry of Public Security, and the State Administration for Market Regulation jointly announced the launch of the 2025 Special Enforcement Action for Personal Information Protection. The campaign aims to address widespread unlawful and non-compliant practices in the collection and use of personal data across commonly used digital services and everyday settings. Focus areas include mobile applications (such as mini-programs, public accounts, and quick apps), software development kits (SDKs), smart terminals including wearable and household devices, and the deployment of facial recognition technology in public venues. The campaign also targets unlawful data practices in offline consumption scenarios and the investigation of personal information-related criminal activity, including the unauthorised sale of personal data. The participating authorities will coordinate enforcement efforts, require corrective measures, and apply strict legal penalties in cases of non-compliance.