On 29 August 2025, China's National Information Security Standardisation Technical Committee (TC260) adopted the guidance on social responsibility of data security and personal information protection. The guidance outlines social responsibilities in relation to data security and personal information protection. The guidance groups these social responsibilities under the five key themes of organisational governance, compliance, innovation and value expression, fair operation, competition and cooperation, user rights protection, public welfare participation, and social development. For each theme, the guidance sets out sub-topics and best practices for organisations to follow in order to comply with social responsibilities in relation to data security and personal information protection. The guidance also provides a list of practical examples and templates.
Original source