China passes new data protection law aimed at protecting users’ data

August 23, 2021 | 2 minutes read

China has passed a new law aimed at protecting user’s privacy. The new law has come after the Chinese tech firms have come under new scrutiny in the country and the law will set rules around the handling of the user’s information. The law will take effect from November 1.

The law formally called the Personal Information Protection Law— was passed by China’s legislature on Friday, Reuters reported, and asked companies to get user’s consent before collecting personal data and has guidelines for how companies should ensure user’s data protection if the data gets transferred outside of China. The bill asks the companies to assign a specialized person to oversee the process. Companies shall also conduct regular meetings and audits to ensure compliance with the said law.

The law also makes it clear that the companies having to deal with personal data should have a clear and objective reason for doing so, and must limit it to the “minimum scope necessary to achieve the goals” of handling said data, according to Reuters.

Reuters reported that in an op-ed in the Chinese state media outlet People’s Court Daily, the National People’s Congress lauded the new legislation.

“Personalization is the result of a user’s choice, and truly personalized recommendations must ensure the user’s freedom to choose, without compulsion,” the op-ed piece read. “Therefore, users must be given the right to not make use of personalized recommendation functions.”