China: Implemented Cybersecurity Law including data protection provisions

On 1 June 2017, the Cybersecurity Law of China, which includes data protection provisions, has been implemented. The law requires network operators to maintain strict confidentiality of collected user information, implement user information protection systems, limit their collection and use of personal information to the principles of necessity, propriety, and legality, and publish rules detailing their purposes and procedures for collecting data. The law also forbids network operators from disclosing, tampering with, or destroying collected personal information. The law gives individuals the right to demand the deletion of personal information if a network operator violates privacy laws, and a right to demand correction where the stored information contains errors.