Catalogue
Chapter I General Principles
Chapter II Rules for Handling Personal Information
Section 1 General Provisions
Section 2 Rules for Handling Sensitive Personal Information
Section 3 Special Provisions of State Organs on Handling Personal Information
Chapter III Rules for Cross-border Provision of Personal Information
Chapter IV Rights of Individuals in Personal Information Processing Activities
Chapter V Obligations of Personal Information Processors
Chapter VI Departments Performing Personal Information Protection Duties
Chapter VII Legal Liability
Chapter VIII Supplementary Provisions
Chapter I General Principles
Article 1 This Law is formulated in accordance with the Constitution in order to protect the rights and interests of personal information, standardize personal information processing activities and promote the rational use of personal information.
Article 2 The personal information of natural persons is protected by law, and no organization or individual may infringe upon the personal information rights and interests of natural persons.
Article 3 This Law shall apply to the activities of processing personal information of natural persons within the territory of the People's Republic of China.
This Law is also applicable to the activities of processing the personal information of Chinese people and natural persons within the territory of China under any of the following circumstances:
(a) for the purpose of providing products or services to domestic natural persons;
(2) Analyzing and evaluating the behavior of natural persons in China;
(3) Other circumstances stipulated by laws and administrative regulations.
Article 4 Personal information refers to all kinds of information related to identified or identifiable natural persons recorded by electronic or other means, excluding information after anonymization.
The processing of personal information includes the collection, storage, use, processing, transmission, provision, disclosure and deletion of personal information.
Article 5 Personal information shall be handled in accordance with the principles of legality, justness, necessity and good faith, and shall not be handled by misleading, cheating or coercion.
Article 6 Personal information should be handled with a clear and reasonable purpose, which should be directly related to the purpose of handling, and in a way that has the least impact on personal rights and interests.
The collection of personal information should be limited to the minimum scope for the purpose of processing, and personal information should not be collected excessively.
Article 7 The principle of openness and transparency shall be followed in handling personal information, and the rules for handling personal information shall be made public, and the purpose, manner and scope of handling shall be clearly stated.
Article 8 When handling personal information, we should ensure the quality of personal information, so as to avoid the adverse impact of inaccurate and incomplete personal information on personal rights and interests.
Article 9 Personal information processors shall be responsible for their personal information processing activities and take necessary measures to ensure the safety of the personal information they handle.
Article 10 No organization or individual may illegally collect, use, process or transmit other people's personal information, or illegally buy, sell, provide or disclose other people's personal information; Do not engage in personal information processing activities that endanger national security and public interests.
Article 11 The State shall establish and improve the personal information protection system, prevent and punish acts that infringe on personal information rights and interests, strengthen publicity and education on personal information protection, and promote the formation of a good environment for the government, enterprises, relevant social organizations and the public to participate in personal information protection.
Article 12 The State actively participates in the formulation of international rules for the protection of personal information, promotes international exchanges and cooperation in the protection of personal information, and promotes mutual recognition of personal information protection rules and standards with other countries, regions and international organizations.