China: Adopted E-Commerce Law including data protection regulation

On 31 August 2018, China's E-Commerce Law, which includes data protection regulation, was adopted. The Law applies to both e-commerce businesses and e-commerce platforms. The Law requires e-commerce businesses to observe data protection regulations regarding the collection and processing of personal information and allow users to search for, correct, and delete their personal information as well as deregister themselves. Further, businesses are required to allow users to opt out from targeted promotion of commodities based on personal information. E-commerce platforms are required to take cybersecurity measures and retain information on commodities, services, and transactions for at least three years. The E-Commerce Law will be implemented on 1 January 2019.