China: Adopted Information Security Technology Gait Recognition Data Security Requirements

On 14 October 2022, China's National Information Security Standardisation Technical Committee (TC260) adopted the Information Security Technology Gait Recognition Data Security Requirements. The Requirements outline the cybersecurity requirements for processing of gait recognition data, including consent requirements and obligations in relation to processing and storage. The Requirements set up distinctions between different usage scenarios of gait recognition technology, based on whether, for example, data is being used to identify data subjects or is being used for scientific purposes. The Requirements will be implemented on 1 May 2023.