Description

Introduced Cybersecurity Law including data protection provisions

On 24 June 2015, the Cybersecurity Law has been introduced to the Standing Committee of the National People's Congress of the People's Republic of China at the 15th Session of the Standing Committee of the 12th National People's Congress. The Bill requires network operators to maintain strict confidentiality of collected user information, implement user information protection systems, limit their collection and use of personal information to the principles of necessity, propriety, and legality, and publishing rules detailing their purposes and procedures for collecting data. The Bill also forbids network operators from disclosing, tampering with, or destroying collected personal information. The Bill gives individuals the right to demand the deletion of personal information if a network operator violates privacy laws, and a right to demand correction where the stored information contains errors.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2015-06-24
under deliberation

On 24 June 2015, the Cybersecurity Law has been introduced to the Standing Committee of the Nationa…

2016-11-07
adopted

On 7 November 2016, the Standing Committee of the National People's Congress of the People's Republ…

2017-06-01
in force

On 1 June 2017, the Cybersecurity Law of China, which includes data protection provisions, has been…