China: Consultation on second draft data security law focussing on data protection including clarifications on scope
Description
Consultation on second draft data security law focussing on data protection including clarifications on scope
The National People's Congress Standing Committee publishes its second draft of the Data Security Law for consultation, which contains several amendments. It states that the catalogue of "important data" is to be formulated by the State in a unified…
Scope
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government
Complete timeline of this policy change
Hide details
2020-07-03
under deliberation
2021-04-29
in consultation
2021-05-28
processing consultation
2021-06-10
adopted
Key regulatory dimensions
Regulated subjects
The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type
Private organisation
Economic activity
cross-cutting
Category
All
2
Type
Other corporate representative
Economic activity
cross-cutting
Category
All
Policy change by business practice
The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): data collection
Regulatory tool
Risk or other impact assessment requirement
Regulator reporting requirement
Regulator notification requirement
Regulator disclosure requirement
Designation of responsible employee
Responsive security requirement
Sanctions
Regulated subjects
1
personal data (all forms): storage (any form)
Regulatory tool
Risk or other impact assessment requirement
Regulator reporting requirement
Regulator notification requirement
Regulator disclosure requirement
Designation of responsible employee
Responsive security requirement
Sanctions
Regulated subjects
1
personal data (all forms): transmission
Regulatory tool
Risk or other impact assessment requirement
Regulator reporting requirement
Regulator notification requirement
Regulator disclosure requirement
Designation of responsible employee
Responsive security requirement
Sanctions
Regulated subjects
1